SOLVED Site Problem with 2 templates
-
-
- Alan Taylor
- Jr. Rocketeer
- Posts: 34
- Thanks: 5
-
Seems someone was able to hackin to the Phishing attack at hxxps://techinedonline[.]com//templates/g5_hydrogen/login1.php, Also, happened with g5_helium.
This URL was previously hosting a phishing attack against ING Belgium.
IP address 142.11.212.38
Country US
Netblock owner Hostwinds LLC.
This attack is possibly geographically restricted and may only be visible from within the following countries:
Belgium
Netherlands
The redirect chain is shown below, with the incident URL highlighted. Mouseover the links to view the full redirect URL.
techinedonline.com/templates/g5_helium/login.php
Issue ID: 34212301 - techinedonline.com/templates/g5_helium/login.php (clean)
Issue ID: 34211534 - inghomeindex.web.app/ (clean)
The redirect graph for this attack can be viewed here.
Is there something I need to do to prevent this in the future? Any advise would be greatly appreciated.
-
-
-
- MrT
- Preeminent Rocketeer
- Posts: 101084
- Thanks: 13481
- Web Designer/Developer
-
Make sure you are using a security product such as rsfirewall or akeeba admin tools pro (I prefer the latter).
Regards, Mark. - Please search forums before posting. Please make sure your post includes the version of the CMS you are using and a link to the problem. Annotations on screenshots can also be helpful to explain problems/goals. Please use the "secure" tab for confidential information.
-
-
-
- Alan Taylor
- Jr. Rocketeer
- Posts: 34
- Thanks: 5
- Thanks for the help. Just installed Akeeba Admin Tools Pro.
-
Time to create page: 0.038 seconds