The image of Linux mascot Tux used to deface the websites of a "small number" of Daily Internet Services customers.
(WEB HOST INDUSTRY REVIEW) — According to several reports published over the weekend, websites belonging to customers of the UK-based web hosting provider Daily Internet Services (www.daily.co.uk) were compromised by hackers late last week, and defaced with images of the cartoon penguin mascot of the Linux operating system.
The image depicted three of the penguin, named Tux, in poses covering his eyes, ears and mouth, respectively, and accompanied by a message from Heart_Hunter of TH3_H4TTAB hacking crew, taking credit for the attack – a fairly tame defacement by hacking standards (seemingly free of any profanity or likewise offensive imagery), but nevertheless an unsettling indication to customers that all is not well at their host.
According to a report on news site Bit-Tech, the company described the attack as having impacted a “small number” of its customers.
Daily Internet Services posted a warning Thursday morning at 9:52 a.m., marking it “high severity,” according to a report appearing on the technology news site Softpedia.
“We have received reports this morning of a small number of customer websites having their index or start page replaced with an image and in some cases text as well,” said the statement.
A quick investigation identified the mass defacement as having targeted sites with the word “index” in their filenames. The company began restoring customer websites from backups at 10:45 a.m. on Thursday and was finished by 9:00 p.m. that evening.
According to Softpedia’s weekend report, Daily was still investigating the precise means of the hack, though it had some reason to believe that the PHP distribution the company was running may have played a part, and has since upgraded to a newer version.
The company said it is confident the defacement will not be repeated, and that servers had been “locked down,” though it warned some customers might experience slowdowns, as it had removed some database servers from its cluster in order to investigate further.
No related posts.











