Site hacked

frodojrr · Joined: 01 Jan 1970 Posts: 34 Location: Park Forest, IL

I had a flurry of international overnight traffic last night, and when I opened my site this morning someone had place a story on the front page of this week's issue. I use iJoomla. No doubt this is a Joomla issue, but I'm posting it here because I want to draw less attention to the problem. If I post at Joomla.com (which is undoubtedly where they learned of my site), then whoever it was may try harder tomorrow night.

I have Joomla version 1.0.11.

I did not see anything in the log files on Joomlastats to indicate that anyone but me had physically logged into the site. I also did not see that I had necessarily logged in overnight, meaning someone figured out my password and used my account.

I deleted a number of user accounts that were "Registered" but unconfirmed. Most of them were from Russia.

I also changed my personal passwords for my administrative accounts.

Any thoughts on how anyone might have done what they did? Is there a back door in Joomla I'm not familiar with?

merav · Posted: Tue Aug 21, 2007 3:41 pm Post subject:

You should talk to http://www.phil-taylor.com they specialize in this. We've used them as well.

frodojrr · Joined: 01 Jan 1970 Posts: 34 Location: Park Forest, IL

RicardoCorai · Posted: Tue Aug 21, 2007 7:06 pm Post subject:

frodojrr · Joined: 01 Jan 1970 Posts: 34 Location: Park Forest, IL

I'll keep them in mind. Right now, I see 150 British pounds = 297.53 USD. A bit rich for my blood right now, unless I have to.

I'll upgrade to 1.0.13 and see if that helps.

Very frustrating.

Recent Usability Tests

Shopping Cart

Satisfaction Guarantee

Get it FREE!

Member Login