The server was hacked sometime early this morning. I’m not sure exactly when, but I think it was between 8 and 9 am EDT. The only thing changed was teh blog breakdown page. I’m not sure if it was deliberate or an unfortunately unprevented accident.
I have since disabled WebDAV for the whole server, and enabled the integrated Windows 2003 firewall. I don’t know if this will prevent the problem because I’m still not quite sure what caused it.
This post is password-protected so that nobody can read it and get the idea to start messing around trying to deliberately hack the server, just in case this was somehow accidental and I haven’t effectively plugged the hole.
