Hacked (again) - Outage planned for tomorrow (tenative)

So the site has been hacked (again) meaning that a root kit is putting redirect javascript into our JS files (again) causing people to be redirected to random sites (again). This means that we have to perform another complete server rebuild (again) which will require a sizable outage (again). This time though, we are moving to an entirely new server with a new IP, which might make the outage loger as we change over our DNS to that new server.

When we did the rebuild last time, we made sure that everything was removed and even did a scan on the entire server a few days later which turned up all clean. So it is possible that whatever is installing the root kit is running at a lower level than the OS or something. At this point... no ideas. We aren't doing anything crazy. We have our services locked down by IP, don't run any special settings... it is just a website.

So be prepared for an outage tomorrow night during the server rebuild. This blog will be updated as we go during the outage tomorrow.

Comments

[Frostbite]

That sucks..... I hope everything goes well, and THIS STOPS HAPPENING! lol.......:-p

[Fafhrdd]

I can't say how sorry I am for you guys....

I know your SO busy with work any everything. I can't imagine the load of work this puts on you.

I am sorry! I hope you guys can figure out something...

[Cormyre]

oui... that seriously sucks guys, best of luck with it o_O
>_< how dare anyone have it out for our favorite site! *RABBLERABBLERABBLE*

[dmd 23]

Blah playstation jerks!

[Dog of Thunder]

*RABBLERABBLERABBLE*

Thanks in advance for the hard work you're about to put in, on top of everything else. It really is appreciated!

[rice md]

So Lame. Good luck.

[Jolly Roncher87]

error error 404.. horrible luck but I'll stick with ya.

[Tha Real Cuber]

Man this sucks big time.
I hate it when jackasses suck up all your free time because they think they are funny destroying other peoples hard and valued work.

Keep it up guys! Succes.

[Erik G]

Dam that sucks, I really wish some of these hackers would slow their role.

[Sean]

Are there BIOS level rootkits out there?