May 24, 2011 :: Investigating a compromise

[Jason]

About 15 minutes ago we had some assorted reports of compromised accounts with a "hacked" message displaying for home pages.

It appears to have impacted at least 2 servers we're aware of presently.

On one of the servers, the messages disappeared within a few minutes without us altering them.

We're investigating this now.  I will update this post once we have more information on this situation. 

Due to the nature of this situation, if you have specific questions, please open a ticket and I'll respond as quickly as possible.

Thanks

[Jason]

A quick update on this situation...

We are still working on this although preliminary results are somewhat positive.

Regardless, I would HIGHLY recommend anyone who has a Joomla installation on their account to ensure they're running the latest version.   That seems to be the easy target used by hackers these days.