Hackers going with the handle Dr. Samim & Chahid Injector Defaced 1000’s of website, the defacement was done by rooting the server.
All the effected domains with extension ‘Domainname.com/r00t.html’ are showing the deface page, and home page of websites are not effected.
Effected websites were showing a deface page as shown in the screenshot provided below:
As the attack was done yesterday night, and more than 20 hours have already passed, Most of the websites have been restored, but few are still showing the deface page.
List of effected websites can be seen from the paste provided below:
Mirror can be seen here :Â https://zone-h.org/archive/ip=74.118.68.227
MassCentral.org is infected and showing similar pages<br />