Our Joolma site has been hacked

[mullet_man]

HACKED BY VURGUNCU

 

Our school Joomla website has just got hacked, I have informed our website technician who is on his hols, hopefully he can get it taken off asap.

 

Just informing you guys in case others get hacked!!

[FN-GM]

was your database password the same as your server password?

 

Is your server been hacked or the domain? The server seems to be based in the isle of man.

 

z

[danIT]

I hope your school has (regular) backups!

[mullet_man]

was your database password the same as your server password?

 

Is your server been hacked or the domain? The server seems to be based in the isle of man.

 

z

 

I think just the joomla has been hacked not the server, the website is not hosted in school.

 

Regrading the backups, I have no clue if we have any, I don't deal with the website myself.

[FN-GM]

I hope your school has (regular) backups!

 

Sorry to hijack how often do you backup?

[mullet_man]

The website was only recently setup, have no idea how we got targetted?

 

Anyway hope we have a backup

[FN-GM]

see the site is up and running was it the site or the sevrer itself that was compromised?

 

Z

[contink]

Key thing to know is what version of Joomla were you using..

 

There were some security exploits in earlier versions of 1.5 and you have to be careful that you don't use any apps/add-ons that also have any exploits.

[Jona]

Just to make you aware, once you get an exploit like this you should treat the whole machine as compromised until proved otherwise. We recently had an old Joomla site hacked and once in they tried to run a load of root kits against the server, fortunatly our apache is well setup to they failed.

 

I assume you either had a weak password or more likely as mentioned above were using a version of Joomla which had known exploits.

 

Cheers

Jona

[Zorba]

Just curious, what form did this attack take and how were you alerted?