Jay's XXX Links hacker busted...

[xxxjay]

No elaborate hack...just some knucklehead who got lucky and found a backdoor. Found his IP address on my logs from Greenville, SC. Saw he had come on my site from GFY. Matched that IP to a username. I came up with his username of GFY and then checked OCCash -- there he was…same username. I had his address, telephone #, ssn…he was toast.

Busted him today.

Thanks to everyone that helped me out.

I've got a shitload of work to try to recover now.

Jay

[MadMax]

Nice work Jay, good to hear you've got that sorted out.

Ruin that fucker :D

[Beaver Bob]

good stuff! glad you found him.

[RedCherry]

Sorry to hear you were hacked, but way to go on finding the guy. I hope you nail him to a tree for that.

[MrYum]

Sorry to hear about the hack Jay, but damn glad you caught the fucker! String the cocksucker up by his balls |angry|

[Bill]

I hope your database recovery goes okay. Sounds like a lot of work.

[tickler]

Sorry to hear about the hack Jay, but damn glad you caught the fucker! String the cocksucker up by his balls |angry|
Hmmmmmmmmmm! Perhaps you should send him here!|club|
http://www.brutalcbt.com/index2.html?nc=1

[bDok]

happy to hear you were able to at least track down the twit.

[Mr. Stiff]

What did you do to him? Break 9 of his fingers?

[Fonz]

So, are you gonna take him for an anal ride?

[SirMoby]

There's nothing quite like calling a hacker on the phone, knocking on their door or showing up at their favorite coffee shop. Glad you nailed him.

[Ramster]

That is great to here Jay. Glad you got the ass.

[xxxjay]

There's nothing quite like calling a hacker on the phone, knocking on their door or showing up at their favorite coffee shop. Glad you nailed him.

I concur.

[cd34]

Better yet, if the damages exceed $5000 in lost income and you can document it, report it to the FBI's datacrimes unit and let the FBI knock on his door.

[Rocco]

good work xxxjay, I would have done the same thing

[xxxjay]

I have got my script back up from the hack, all of the old trades are in there and active…all you have to do is start sending hits again and you are good to go.

If you have questions please contact me jay@jqmedia.org

[Kenny B!]

Good catch Jay, it's always gratifying to find the fucker who tries to mess with you lively hood

[HoneLynn]

Glad you caught him. Nice detective work :)

[Babagirls]

jay im really glad u caught the SOB cuz the SAME THING happend to me, from gfy as well, last week.

he found the backdoor entrance of my blog and somehow hacked into and changed my email (to gfy@****.com, thats how i know he was from gfy) and changed my password as well.

Hope its the same asshole and hope he gets what he deserves!!!!
*APPLAUSE*

[ClickBuster]

jay im really glad u caught the SOB cuz the SAME THING happend to me, from gfy as well, last week.

he found the backdoor entrance of my blog and somehow hacked into and changed my email (to gfy@****.com, thats how i know he was from gfy) and changed my password as well.

Hope its the same asshole and hope he gets what he deserves!!!!
*APPLAUSE*
That can happen very easy if you're using an old vulnerable version of an Open-Source s/w product. For instance WordPress was vulnerable 7-8 months ago, thus not many people updated their sites. Not to mention phpAdsNew2, etc.

Actually to be more specific here's a link with a list of all vulnerable applications:

http://www.securityfocus.com/bid/14088/info

[Babagirls]

That can happen very easy if you're using an old vulnerable version of an Open-Source s/w product. For instance WordPress was vulnerable 7-8 months ago, thus not many people updated their sites. Not to mention phpAdsNew2, etc.

Actually to be more specific here's a link with a list of all vulnerable applications:

http://www.securityfocus.com/bid/14088/info

it was a blogger dot com account.
i just installed wordpress, going to make a backup of my site just in case it ever happens again.

[ClickBuster]

The he didn't hacked in, he knew your admin user/pass. If somebody hacks Blogger, please let me know about it ;))

[Babagirls]

The he didn't hacked in, he knew your admin user/pass. If somebody hacks Blogger, please let me know about it ;))

theres no way that ANYone could have know my password. and i find it odd that this person was from gfy (where jays blog hacker was from as well). makes ya think.

[ClickBuster]

Where does it says that whoever hacked jay hacked him thru his blog?!? I'm sorry, am I missing something?

[bDok]

That can happen very easy if you're using an old vulnerable version of an Open-Source s/w product. For instance WordPress was vulnerable 7-8 months ago, thus not many people updated their sites. Not to mention phpAdsNew2, etc.

Actually to be more specific here's a link with a list of all vulnerable applications:

http://www.securityfocus.com/bid/14088/info


good looking out with the post there. Had remembered in the dashboard of my blogs mention that and that I was ok against it. Had me double check after this though.

:D

Cheers,
B

[xxxjay]

Where does it says that whoever hacked jay hacked him thru his blog?!? I'm sorry, am I missing something?

You have to be careful with the proprietry scripts...the hackers know a lot of the holes.

[selena]

For WP users in this thread...

A nifty little backup plugin:

http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/

I use it along with the cron plugin. It backs up my blog on a daily basis, and sends me a gz file of th backup.

[Papa]

Isn't fun when you bust a mother f*ck ? Once i met a guy that we knew had f*ck us but he didn't know WE KNEW about it.

[DonX]

Glad you got him Jay, now fry the fucker!!!! |thumb