Hackers!

  • From: "Cox, Christopher [Allen & Heath UK]" <Chris.Cox@xxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 31 May 2002 13:35:10 +0100

Here's an interesting one.

Following the management buyout of my company and the upgrade of our
Exchange 5.5 server to 2000, I was forced to add a local connection for
incoming email to my server, which without first investing in a firewall
(money constraints -duh!) we connected directly onto our internet LAN.
The Exchange 2000 server was set up pretty much as defaults out of the
box, although we did have a consultant in to do it.

I have just been looking at some backup logs and it seems that at some
time in the past a folder has appeared in
\Exchsrvr\databases\Storage_Group_2 (where we store our databases). The
folder is called "incoming" and is full of pirate software, MP3s and
movies (about 20GBs of it).

Can anyone explain how they got this stuff may have got onto my server?

Chris Cox   BEng, DiplEng
Information Technology Manager
Allen & Heath Limited,Kernick Industrial Estate,Penryn
Cornwall. UK TR10 9LU
Tel +44 (0)870 7556250, Fax +44(0)1326 370139
Direct: +44(0)870 7556270 Mobile +44(0)781 555 1962
EMail chris.cox@xxxxxxxxxxxxxxx Web http://www.allen-heath.com
<http://www.allen-heath.com/>

***DISCLAIMER***
This Email and any files transmitted with it are confidential and
intended solely for the use of the individual to whom or the entity to
which they are addressed. If you have received this email in error
please notify the sender immediately. Please note that any views or
opinions presented in this email are those of the author and do not
necessarily represent those of Allen & Heath Limited. The recipient
should check this email and any attachments for the presence of viruses.
Allen & Heath Limited accepts no liability for any damage caused by any
virus transmitted via this email. 

Other related posts: