Site hacked, anyone know if they got in through a script?
 

Hey,

My site has been hacked, it was just 1 vb at first, then a few others that also run vb.

Every page is showing hacked by grabberz team, the admin login page does work though.

This happened around 1 year ago, I lost so much and I just gave up but I got a backup of all my sites, only 1 is hacked on the backup and its more of a test site but it is still over a year old.

If it was hacked once, it could be hacked again.

It started on vb then they must have been able to access the databases because it also got into a jcow site after that.

Hopefully someone can help, maybe someone has heard of this happening to someone else.

Thanks for any help

There could have been any number of reasons the site got hacked. The best bet is to upgrade to the latest vB3 version, then follow the following two blog posts.

http://www.vbulletin.com/forum/blogs...ve-been-hacked
http://www.vbulletin.com/forum/blogs...vbulletin-site

First check if any of your plugins are outdated. Also post the list here so we can check it.
Then check for any suspicious backdoors/files on your server: AdminCP > Maintenance > Suspect File Versions. (Not sure if this is available for vB3 since I don't use it.)

Then check your error/access logs on how they got into your site, although this may be difficult since it happened 1 year ago?

If this is all too complicated, you should hire someone to do this all for you because there are a bunch of ways to hack a site.

Did you have VBSEO installed by any chance?