Announcement

Collapse
No announcement yet.

Hacked?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • FSM
    replied
    You should probably check for a shell (a php file added to your webspace that lets a remote user perform all kinds of functions), review all of your plugins, and review all of your read/write permissions as well. The damage can be worse than you think.

    Usually looking at the creation/modification dates can assist you in finding newly added files.

    Leave a comment:


  • Greeksgal
    replied
    Never mind, found out I have to delete my install directory. Done. Thanks

    Leave a comment:


  • Greeksgal
    started a topic Hacked?

    Hacked?

    One of my admin just sent me a message saying she'd seen additional staff added to the moderator list in the admin panel. I went and checked and I had two extra Admin with full permissions added as staff. No IP addresses available in their profiles...no posts made, nothing noted in the mod/admin logs etc. One account was added on the 3rd and another on the 4th. One of the users had "hack" in their username and email. How is this possible? Running 4.2.1 Have deleted the accounts now and have deleted my Install folder...how do I stop this happening again?

Related Topics

Collapse

Working...
X