It's confirmed.. they only operate support during business hours. And.. the reason they suspended the website was
./usernamehere/tmp/analog/7.html php.backdoor.system_shell.015
./usernamehere/tmp/analog/4.html php.backdoor.system_shell.015
etc..
Which were all webstats files CREATED BY THEIR OWN SERVER/ CPANEL!
They scanned customer directories, identified non web accessible .HTML files which contain web stats / requests of visitors and then suspended sites based on that.
Insane.
#tsohost
#INTERNATONAL_TECH_NEWS | #BIG_TECH | #Hundreds of #GoDaddy-hosted sites #backdoored in a #single_day??
The case affects internet service #resellers such as #MediaTemple, #tsoHost, #123Reg, #Domain_Factory, #Heart_Internet..
The #discovery comes from #Wordfence, whose team first observed the #malicious activity on March 11, 2022, with 298 websites #infected by the #backdoor within 24 hours, 281 of which were hosted on #GoDaddy.
Disclaimer: DavidV.T
#backdoor #infected #malicious #wordfence #discovery #Heart_Internet #Domain_Factory #123Reg #tsoHost #MediaTemple #resellers #single_day #backdoored #godaddy #hundreds #big_tech #INTERNATONAL_TECH_NEWS
@wendy This is cool! But it seems to require #sox. Annoyingly, my hosting, #webfaction, is shutting down and I'm being migrated to #tsoHost, which seems to have fewer features, so I can't rely on on any command line programs.
I really should look for a host more like webfaction is/was, as they let me do really a lot of things and had command line access, etc.