Frank Bonnet wrote: > I think effectivelly users's requests have been redirected > to the hacked servers ... > > I wonder how they do that because users access directly to > those servers ... they do not click in a fake email or anything > like that , those servers are well known of our users , > the extranet and one webmail > > hacked router ? hacked DNS ? Does it comes from INSIDE ? > > Our main routers seems OK and I have cautiously checked > our primary DNS > > Gosh ... HOW ??? > I suspect some hackers managed to hijack their website and changed the links on the webpage. It is very simple to do this on servers managed by companies that have no expertise of security matters. I have seen many websites taken over by spammers supplying viagra and other medical stuff and all they are interested to do is to paste their html/CSS code on somebody's website. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx