How to restore a hacked Linux server

Posted July 20th, 2006 in , , ,

Overview of steps:

  • Don’t panic. Keep your calm and develop a plan of actions
  • Disconnect the system from the network
  • Discover the method used to compromise the system
  • Stop all the attacker scripts and remove his files
  • Restore not affected services
  • Fix the problem that caused the compromise
  • Restore the affected services
  • Monitor the system

Full article: How to restore a hacked Linux server