oddz on "Website defaced (second time!) :("

Hi all,
I went to my website yesterday: http://www.naink.org
To discover it had been defaced/hacked

Unfortunately this is the 2nd time this has happened! The first time it was running Joomla, and got hacked. So i ditched it and installed WP.

Ive kept everything up to date in WordPress religously! I just cant believe its happened again.
Can anyone give me some insight into how this has happened? Ive put a support ticket in with the webhost too.

Just curious if its a WP vulnerablity or something ive stuffed up.
Intrestingly enough, i tried to access my website 3-4 days before the hack occured, and could not log in! So i reset the password, then after that i was hacked So im thinking that had something to do with the hack?

Some searching around has made me think that maybe i have a rootkit or something along those lines hiding away on my website? But i cant seem to find the dam thing!

Im able to restore the site, by replacing the themes index.php with a backed up copy. But i wanted to leave it up for now so i can debug whats happened and try prevent it.

Any help is appreciated!

Thanks,
Chris

Share on Facebook