Mirage Source

Yeah, it happened, and I'm pissed as all hell about it. Using Joomla 1.5.8, someone apparently injected javascript code into my default site template that points my users to a malicious site to download malware. My site is under quarantine from google, meaning anyone using Chrome or Firefox won't get to my site without huge warning labels until they finish verifying I don't have any more malware on my site. I cleaned up all my code an updated to Joomla 1.5.9, contacted my web host and they will send me a detailed report if there are any other backdoors in my website. Sonofabitch is going to pay if I ever finds out who did it. I did a whois on the site it redirects my users to, and it appears to be yet another compromised website. Fired off an email to the IT responsible for that website, so hopefully they can fix it, and track backwards to whoever got on there in the first place.

GOD DAMN am I pissed!

_________________

Why would someone hack your site? It's not like you have that much traffic ya?

Probably a common bug in the site, some software piece scanning sites that still use outdated versions of Joomla, and inject their shit. I know the problem from own experience ;p.

I think that's what happened, but the weird thing is that Dugor has been groaning that Chrome has been telling him my site's been infected since December. I scanned things back then, didn't find anything, and me and a few other people never got warnings popping up in firefox or chrome until today. Hopefully Google reviews my site soon and can clear it.

_________________

Chrome could've realized you're using an outdated template?

Just remember..

Keith Head Graphics Developer

That guy...So cool )

huh?

_________________

^^^^^
Keith XD

I'm using JOOMLA 1.5.9 on a site where security is rather critical (for a school org where the site has been hacked before and they lost net rights for a few years because of it)

Should I be using a different CMS? Or was it fixed with the update to 1.5.9?

_________________

Why not try my app, ColorEye, on your Android devlce?
Do you like social gaming? Fight it out in Battle Juice!

I am a professional software developer in Salt Lake City, UT.

I used to use Drupal, but it's been a while since I've toyed with it. Been even longer since I've toyed with Joomla, so I don't really know which would be considered more secure, nor which better suites a school's website.

_________________

lol check milw0rm for "Joomla"

:p

According to my web host 1.5.9 should address the security issue that brought my website down. I was using 1.5.8, so now that I have it patched I shouldn't experience any more hacong attempts unless there is a zero day exploit.

_________________

Firefox is letting me on no problems..

_________________

It's fixed now, this time last week it was a major problem. So if you notice anything strange again then let me know, but it should be good to go for now.

_________________