Tradebit was hacked - problem fixed
Last night some chinese hacker infiltrated tradebit to place a fraudulent javascript file on the system. It took us quite some time to find the user and track him down with all the changes he made. Good for us was, that he was just trying to do some javascript cookie dropping and fetched some files from another server but did not delete users or files. That would be worst case.
We have spent the whole day to dig through the webserver logs of the last weeks to make sure we find his changes. The guy was pretty smart and hacked the system a few days ago and came back last night to use his hacks.
We think we got all changes reversed and found all his “root shell” scripts. We recommend that you change your password on tradebit - just in case!
