Web hosting service provider InMotion’s data center suffered a by a hacker named TiGER-M@TE, leaving a few hundred thousand website owners with nonfunctional pages.
“At around 4 a.m. EST, our system administration team identified a website defacement attack affecting a large number of customers. We are still investigating, but it appears that files named index.php have been defaced,” InMotion officials said.
In an interview TiGER-M@TE said he is working alone, his modus operandi narrowing to private exploits and zero-day attacks, according to The Hacker News.
“I hack 700,000 websites in one shot, this may be a new world Record. After submitting 200,000 domains,zone-h was going down again and again and became almost unresponsive in the end. so i was unable to submit all websites. so i’ve listed all domains in attachment. It was not just a server hack, actually whole data center got hacked,” he said.
It seems that he didn’t do much harm to the websites, only replacing the index file on each with his own. The hosting company has already started the repair process, guiding members who possess the necessary knowledge to make the repairs themselves.
“If you have a backup of your site, you may upload your index.php files to correct this. You may need to do this for each directory. If your site uses an index.html or index.htm, you will need to upload those files, then delete the index.php,” a press release stated.
After a few hours the company successfully restored 65% of the affected pages, urging users to refresh their browsers if they’re still viewing the hacked site.
Customers that see a directory listing instead of their website should upload a backup copy to their domain host, InMotion said.