Quote:
Originally Posted by MikeSouth
caro was all over it, I knew within minutes it had happened but my fear is that it will happen all over again hopefully we can find where the weakness was.
The dirs ave been fully restored...restoring databases now hopefully just a couple hrs
|
Was just there and the front page still shows the hacker message.
Noticed it says that all they did was edit your index. Normal way they do that is in the index or footer template they put a div with an absolute position of 0,0 so that it covers the front page. Pretty easy to fix if they did not go deeper.