Anonymous writes "
The webmaster of has determined that a group of apparently Brazilian Hackers has set out to maliciously overtake as many exploitable PHPNuke sites as possible. During the week of January 24-29, his site was defaced using a cross-site scripting exploitation utilizing the file 'nukebrowser.php' and a remote program called 4843term.php. The hackers are calling themselves 'The pirates of network, and have previously demonstrated attacks against PHPNuke using a similar exploitation. NukeForums has documented these attacks. In this week's attack, the Brazilian Web Host http://www.twinhead.com.br was implicated in supporting the Hacker Havenard's files. Havenard is the name used in all of the previous attacks.


Twinhead was contacted, but has not replied to an inquiry regarding this matter.

Note: Nuke Cops has a thread on this topic already which covers the details of the attack."