[cobalt-users] Got Hacked.

["Dee Dreslough" <dee@xxxxxxxxxxx>]

Hi Y'all!

Just an FYI that my Cobalt Raq3i got hacked last night. *sigh* From what I
can tell, they used the BIND exploit that's been talked about... Luckily,
they didn't restart various processes they were putting trojans on correctly
and I got a bootload of warning messages in the morning.  They also broke a
bunch of stuff and left calling cards all over the machine, despite a
half-hearted attempt to clean out the log files to cover their tracks.  It
was like having a bear break into my virtual kitchen. They left a big mess.
:)

I suspect they found me through this list, and are hunting for Cobalts run
by newbies...so, Newbies beware! :) Now I'm off to pay money to have them
rebuild my machine from scratch, and then I get to install all my websites
from backup again.

I'm learning...I don't like to learn the hard way, but sometimes it's the
only way I do learn... :)

Love, y'all!

Dee Dreslough
Cobalt Newbie, who's going to learn how to run Portsentry, etc etc etc...and
be a lot more dilligent about installing those patches as they come out
(once I know they won't kill my system.)