Joomla Hacked

Had one of my sites defaced recently by a turkish hacking group. It is a site running Joomla and one where I foolishly hadn't updated the excellent Acajoom newsletter component.

The wakeup made me update all my Joomla sites and components and modules. In doing so I discovered a few visits on some other sites where the visitors were checking for unsecure scripts.

So if you see the following in your search logs I'd recommend getting the component upgraded or removed asap!

inurl:"com_acajoom" mailingid

option=com_acajoom

com_acajoom

In fact if you see any searches in your site related to Joomla components or modules then you need to be aware and start checking logs.