Multiple hacking attempts?

[nathanielrsuchy]

There have been multiple attempts SQL Injection attempts against my site. Should I contact a private security firm? (The attacks are from another country so suing isn't an option) I've blacklisted the IP Addresses but still concerned. Your thoughts?

 

[Thomasss]

Moved this to a new forum, our Community Matters board is mainly for issues regarding our forum.

Anyway, I wouldn't yet. I would most certainly tighten up security and make sure you have backups and complex passwords. A private security firm might not be able to do much if they're switching back and fourth from IP's, though I could be wrong.

 

[nathanielrsuchy]

Moved this to a new forum, our Community Matters board is mainly for issues regarding our forum.

Anyway, I wouldn't yet. I would most certainly tighten up security and make sure you have backups and complex passwords. A private security firm might not be able to do much if they're switching back and fourth from IP's, though I could be wrong.

Ok thanks and sorry. I've definitely tightened security. Our investigation showed it was SQL Injection (Vuln was patched) the user took the time to drop their account from the user table after their attack was done. Sadly for them I keep historical SQL Backups (every 15 minutes 15MB Database @ $0.03/GB = not horrible costs). The user's residential IP address wasn't in the US so I can't sue. Probably gonna hire a firm soon...

 

[KnownSyntax]

If anything there isn't much to do if they aren't within the country which has laws such as the US. The only big thing you can do is make sure that you have updated software and try to have any zero-day alerts sent to somewhere that you will check right away.

The fact that they tried using an old vuln. means really nothing, however if they found a vuln, then that is a big issue. Would recommend trying to find a way to tighten security more on the SQL level or even using software that isn't too dated (but also isn't too new to prevent zero-days).

 

[nathanielrsuchy]

If anything there isn't much to do if they aren't within the country which has laws such as the US. The only big thing you can do is make sure that you have updated software and try to have any zero-day alerts sent to somewhere that you will check right away.

The fact that they tried using an old vuln. means really nothing, however if they found a vuln, then that is a big issue. Would recommend trying to find a way to tighten security more on the SQL level or even using software that isn't too dated (but also isn't too new to prevent zero-days).

The Vuln was patched after the attack. And it was a Vuln with code that I wrote not code from MyBB.