Several of my websites have been hacked by a script kiddi

1 replies
Hi our problem is several of our websites have been hacked by a script kiddie the symptom is all of my front pages are now coming up with the hackers front page. A copy of the code used is in two of the attached text files.(deafault .txt & hackers code.txt) hackers code was found in the same web site as climhph.txt) It is affecting straight html websites and some joomla websites. I host with blue host and I am still trying to figure out how they got into the root level to attack all the websites (15 in total) Not all the websites have ftp access and the main domain does not have a web presence.
Some of the sites I have a backup for but not all of them (stupid I know) I can put the index page back onto the straight html sites but i am having a problem with the Joomla sites.
I have gone into the joomla admin panel and checked my front page details and they are as they should be but when I click on the page view the hackers page comes up. so I suspect the problem must be in a php script somewhere.
My questions are has anyone had this problem and does anyone know how to fix it without doing a complete rebuild? Any advice and help would be most welcome.


Cheers


Jason
#hacked #kiddi #script #websites
  • Profile picture of the author stma
    Originally Posted by Regional Warrior View Post

    Hi our problem is several of our websites have been hacked by a script kiddie the symptom is all of my front pages are now coming up with the hackers front page. A copy of the code used is in two of the attached text files.(deafault .txt & hackers code.txt) hackers code was found in the same web site as climhph.txt) It is affecting straight html websites and some joomla websites. I host with blue host and I am still trying to figure out how they got into the root level to attack all the websites (15 in total) Not all the websites have ftp access and the main domain does not have a web presence.
    Some of the sites I have a backup for but not all of them (stupid I know) I can put the index page back onto the straight html sites but i am having a problem with the Joomla sites.
    I have gone into the joomla admin panel and checked my front page details and they are as they should be but when I click on the page view the hackers page comes up. so I suspect the problem must be in a php script somewhere.
    My questions are has anyone had this problem and does anyone know how to fix it without doing a complete rebuild? Any advice and help would be most welcome.


    Cheers


    Jason
    Sounds like they rewrote your index pages. You can probably fix by downloading joomla and re-uploading the index page. Probably got your sub folders as well.

    On a side note - this happens because you are on a shared host, and there are always vulnerabilities.
    {{ DiscussionBoard.errors[3302401].message }}

Trending Topics