Nasty hacker who change my websites’s offline.php
It took me two hours to diagnose which file has been changed, I used eliminating way to find it. Eventually I found the offline.php was modified by hacker to :
<html><head>
<meta http-equiv=”Content-Language” content=”tr”>
<meta http-equiv=”Content-Type” content=”text/html; charset=windows-1254″><title>The Snip3r & His Friends::> ||Serseri-X||Mannak||CW_Graft||</title></head><body bgcolor=”#000000″>
<p align=”center”>
<p align=”center”><font color=”#ff0000″ face=”Impact” size=”10″>The Snip<font color=”#ffffff”>3</font>r </font></p>
<p align=”center”><font color=”#666666″ face=”Impact” size=”5″>Siber Dünyanın TÜRK Çocukları!</font></p>
<p align=”center”> </p>
<p align=”center”><font color=”#e1e0d7″ face=”Trebuchet MS”><strong>Can sıkıntısı
Bi sebebi yok…</strong></font></p>
></html>
You can copy the above html code to run locally to see what hacker’s page looks like.