[vox-tech] hacked site

[timriley at appahost.com]

> -------- Original Message --------
> Subject: [vox-tech] hacked site
> From: "jimbo" <evesautomotive at wavecable.com>
> Date: Tue, June 21, 2011 8:37 am
> To: "lugod's technical discussion forum" <vox-tech at lists.lugod.org>
> 
> 
> Some company ( internetidentity.com ) that is contracted by Chase banking 
> sent me email saying that my web site was hacked.  I also received a notice 
> from Google for a possible phishing web page.  I confirmed this and found 
> someone hacked into my web site and placed a phony Chase credit card form 
> with all the bells and whistles.

This is scary. I would find another hosting company.

> I contacted internetidentity via phone and 
> was told that they might have used a vulnerability in a shopping cart.

Is this an open-source shopping cart?

I have a virtual hosting account with Hurricane Electric ($25/month).
And I
have 100% confidence in their ability to use standard Linux security
to prevent any hacking. Accessing my account is through the secured
shell,
and uploading files are through secured copy.

<snip>