Compromised Shared Hosting Server: Palamedes

Message

One of our Windows shared hosting servers has been compromised. The attacker has placed default HTML & ASP documents in webspaces which is causing his page to be shown on some of the websites within the shared server.

We are currently working on restoring these services back to normal and will keep this status blog updated as we do so.

This will affect anybody with websites on the server palamedes.blacknight.ie

Update: Erroneous documents have been removed and the perl script which the attacker used has been removed. We are now working on ensuring data is fully intact on the server.

Update: The majority of the sites are now operating normally. However there is a handful that need more restoration. We are completing this now.