Some of you are probably DreamHost customers, so I thought I’d blog about this incident. There was a security breach at DreamHost and as a result, they decided that resetting the FTP/shell access passwords is the best approach. The security breach seems to have only affected FTP/shell access passwords, so all of your other passwords (billing, Web panel, email) have not been changed.
For more details, click HERE.
So when you get a chance to, log into your DreamHost account and change your FTP/shell access pw. Now they say that the other passwords weren’t affected by the breach but I’d recommend changing all of your passwords to play it safe. Also, if you’re using the same password for accounts at popular websites such as PayPal, I’d recommend changing those as well.
Changing several passwords is obviously an inconvenience but a little bit of paranoia doesn’t hurt.
January 21st, 2012 at 3:53 pm
The problem is much bigger than that if you have wordpress. The code is infected and Viagra ads may be served rather than your site. One of my sites is missing all the inside pages.
“Early this morning, we received reports that WordPress blogs were hacked on Linux shared-hosting at DreamHost, as well as other hosting companies. This is dangerous scareware which tries to install a virus on your visitor’s computer.
WordPress, Zencart and other php-based platforms were hit. Our earliest hacked site report is of 5/6/2010 @ 9:17am.
This malware was just detected and is not showing up on website malware scanners yet. We have notified sucuri.net of this latest infection so that they can immediately update their malware detections systems.
http://discussion.dreamhost.com/archive/index.php/thread-133935.html
600,000 domains affected and GoDaddy hosting had a similar incident