Quote:
Originally Posted by cheri our server at work is too delicate. Im not allowed to touch it. Someone was useing our server to send spam a few months ago. IT guy said it had to be an inside job....a few weeks after that the delicate flower (server) crashed...leaving boss dude with a bill that he could have just purchased a more manly server.
my opinion is how inside was this job....hmmm me and my coworker got stiffed for weeks at a time with not being able to do our jobs...only one person made out like a bandit....am i being too suspicious? Can that kind of stuff happen remotely? Honestly we are a 2 person office and neither one of us are technology savvy like that....there was even mention of the cleaning people messing with the server...AFTER i was put off by the whole thing (actually hurt and pissed off).
Just dont add up to me. |
If the server was being used to send spam it really comes down to network security and who has the administrator rights to install programs on the server.
What kind of firewall and anti-virus are running on the server would be my first question. What are the internet security settings of the server's native setup.
It could have been either. I nmy experience "IT" guys are hit or miss. Sometimes you get a really good one, sometimes you get a paper MCSE.
I would have looked at when it started and did a comparision with the event logs to determin whom, if anyone was logged into the machine.
To answer the last question, yes this could have been done remote by someone who either broke thru your network security, or has the remote credentials to log in. Also dependant on if the server has a web application, the web server could have been access through a vulnerability in the web applications running. SQL is notoriously bad about vulnerabilities.