Site Hacked

[Webtwink]

Hi one of my friends' site and one of my own site's have been hacked by a group called TurkHacks. I don't know who they are, and have tried to look up them.

One of site's that was hacked was www.maksimfishing.com


I would appreciate any help in this regard.


Thankswww.maksimfishing.com

 

[whitebark]

Those turk goobers seem to like defacing websites running unpatched forum software.

Were you running a forum?

 

[Webtwink]

I had a mambo cms running on it!

 

[whitebark]

Mambo like all opensource CMS packages do have security holes. Mambo is usually better than say phpnuke but if you check the mambo forums this issue may be addressed.

Or they may have gotten in through your server. Either way you will need to delete every last file off of there and reinstall from a recent backup - database included. Ask your webhost to investigate as well.

 

[Webtwink]

I haven't been paying that much attention to upgrades, but because of that, one of my other sites' also seems to have become victim of it.

 

[whitebark]

After doing your reinstall and upgrade - make sure to check any modules as well. Looking over security warnings for mambo it appears it is third party modules getting most of the security problems vs the core mambo cms.

 

[CrazyTech]

Consider it a lesson learned, always be aware of making sure that your software is up to date. This is the main stipulation of using a CMS is that you absolutely must keep watch to make sure you have the latest version and have addressed any security holes that have been released. The same group hit a client of ours recently; he had failed to upgrade phpBB in his particular case.