San Diego State University Website Hacked and Exploited

TOKYO (MacHouse) - San Diego State University has its website at http://sdsu.edu. (See Screenshot 01.) There is a subdomain website at http://www-rohan.sdsu.edu. ROHAN Academic Computing WWW Server seems to be used to host webpages of University’s students and faculty. (See Screenshot 02.) They have a groupware PHP software script called Tiki 1.8.5 - Polaris at http://www-rohan.sdsu.edu/tikiwiki-1.8.5/. (See Screenshot 03.)
![]() Screenshot 01 - Source: sdsu.edu |
![]() Screenshot 02 - Source: sdsu.edu |
![]() Screenshot 03 - Source: sdsu.edu |
An organized cyber criminal group appears to have hacked and exploited ROHAN Academic Computing WWW Server. They have installed ill codes/pages so that they can redirect Internet users to other sponsor websites.
![]() Screenshot 04 - Source: sdsu.edu |
![]() Screenshot 05 - Source: sdsu.edu |
![]() Screenshot 06 - Source: sdsu.edu |
The cyber criminal group seems to have installed ill codes right under the subdirectory of tikiwiki-1.8.5. So whether you access http://www-rohan.sdsu.edu/tikiwiki-1.8.5/2005/ (See Screenshot 04.) or http://www-rohan.sdsu.edu/tikiwiki-1.8.5/555555555555555/ (See Screenshot 05.), you will eventually end up with similar spam ad content. (See Screenshot 06.)
Click on the button to watch a documentation video. ![]()
Click on the button to watch more documentation videos. ![]()
********** ********** ********** ********** ********** ********** ********** **********
MacHouse is not funded by tax payers' money. We have limited resources. We also need time to sleep and eat just as others. So we will not act as the International police to contact all victims of website abuse. All you have to do is to subscribe to spam messages and spam posts. If we can, why don't you?

















Leave a Reply
You are prohibited from posting comments merely to advertise your website. Please read Rules and About This Blog at the top menu bar for more information.
Because of spam-comment criminals, we are forced to manually moderate every comment that you may post. Your comment will appear only after we review and then approve it. It will take us several hours at most to review it.
Please note that all one-sentence comments will be automatically rejected as an anti-spam measure.