Security in Joomla! 1.5 • Anyone seen this hack? Mentions "DNBIZ Ltd"

A friend's Joomla 1.5 site was hacked back in June and I helped them restore it. Afterwards I set up a google alert on the website domain name.



Today, almost 3 months later, I get an email from google alert:

Quote:

www.[snip website domain].com

[snip website domain].com

DNBIZ Ltd., the affiliate of Hangzhou 365 Internet Ltd., is committed to protecting your privacy. This Privacy Statement sets forth our current privacy ...

Suffice to say, that content is not expected!



Intrigued, I ran a google search for the dodgy content. Almost 4.5m (yup, million) hits for the string "DNBIZ Ltd., the affiliate of Hangzhou 365 Internet Ltd., is committed to protecting your privacy. This Privacy Statement sets forth our current privacy".



Many of the hits are obviously Joomla site (URL contains index.php?option=com_content or similar).



So... I guess what I'm getting at is (a) should I be concerned that the website is still vulnerable, or could this be some sort of artifact of the previous hack, and (b) has anyone else come across this?



Thanks!

Statistics: Posted by nonsavant — Wed Oct 15, 2014 9:36 pm

---

via Joomla! http://ift.tt/1sKt4e3