Our web site (https://betteraviationjobs.com) skilled a collection of cyberattacks on 3rd & 4th December 2020 midnight (GMT +8).
On 3rd December midnight, our server reported CPU utilization been repeatedly working 90% for greater than 5 minutes, our safety system instantly shut down server for couple of minutes. After restart, it run usually.
On 4th December midnight, once more our server reported CPU utilization is working excessive, it solely occurred couple of minutes, our website is redirect to others web site (spam, promoting advertisements, phishing, and so forth…).
After hours of troubleshooting, we discovered:
- 4419 SQL scripts been hacked/ assaults (change content material to drive redirect our web site to others web site).
- Greater than 1700 Media Recordsdata been hacked/ assaults (at media description, drive redirect our web site to others web site).
- Greater than 1900 Job Itemizing Posts been hacked/ assaults (at each content material add Javascript drive redirect our web site to others web site).
- Greater than 1800 back-end supply code information been hacked/ assaults (at supply code file, change few code to execute redirect).
- DDOS assaults being detected on 3rd & 4th December 2020 midnight.
Motion taken:
After hours of troubleshooting, we discover the timing we making an attempt to repair our web site is just not even handle to catchup the pace of hacker to hack our web site.
Subsequently, we’ve no selection, we MUST migrate our web site to new server (abandon and rebuild), to cease this bleeding.
With instant motion taken, we initiated migrate our web site to new server on 4th December 2020 midday.
Outcomes:
After hours of spending, we efficiently migrate our web site to new server, we managed to cease this cyberattacks, we additionally managed emigrate an important information Job Itemizing Information to the brand new server. Sadly, not all of the pages is ready to migrate to new server.
We DO NOT preserve consumer information in our web site, subsequently no consumer information has been leak on account of this cyberattacks incident.
For the time being, nonetheless some pages is lacking or not show as anticipated. Prime menu of our web site continues to be but to fastened. Present web site format is just not finalised. Regular searching any Job Listing is working easy.
We are going to proceed strive our greatest to revive every part it might. It’d take a while to repair every part.
We apologies for any inconvenience precipitated.
Contact us:
When you’ve got any query/ concern relating to this cyberattack incident, you could contact us at info@betteraviationjobs.com
Thanks.
Final replace: 04th December 2020 | 1500 UTC
