[cobalt-users] RaQ3: Hacked again even with all the latest updates installed

["Dave" <daver1@xxxxxxxxxxxxxxx>]

Well folks, the crackers got in again. We had all the latest
patches from cobalt installed, and this time they wiped out
most of our clients sites, changed my admin password, etc.
I am currently waiting for our provider to reset my passwords.
Anyone have any ideas on how they got in this time? Once I
regain access I am going to install port sentry, Hopefully
this will help. Any other suggestions would also be helpful
and very much appreciated. Please forgive my ignorance, but
which would be the best log files for me to search to try and
figure out who got in and how??

----------------------------------------------------------------------------
-----
Cheers, Dave Reid (Night Rider)
Engaging in a battle of wits should only be attempted when sufficiently
armed
----------------------------------------------------------------------------
-----