Just to clarify, this was not a server based hack. This hack was a compromise at the website code level, and was contained within the website. At the moment, alot of websites are being hacked through common exploits found in older joomla and wordpress code. These exploits are usually patched and fixed with updated versions within the version series, however other exploits can exist within older versions of addon components and modules. These components and modules need to be updated along with the CMS code as and when updates are released by their authors. adhering to best practices such as a renamed admin user account, with the strict use of complex characters will help ensure a hack free website.
↧