The site is being hacked. What to do?

G

grinch_asd2018-06-27 19:11:27

SQL

grinch_asd, 2018-06-27 19:11:27

Hello!
Site on Bitrix. Some time ago, applications from the site began to come to the mail that your site had won a cash prize, follow the link to receive it, etc. Bitrix also says that there were several attempts to implement sql. I have a few questions.
1. What to do about it? Strengthen security? If so, what exactly
? 2. Is this a common practice at all? those. why did they suddenly want to hack it - competition or someone just has nothing to do?
3. And of course, is it possible to catch a criminal? (calculation by IP did not help)))

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

D

d-stream, 2018-06-27
@grinch_asd

2. Is this a common practice at all? those. why did they suddenly want to hack it - competition or someone just has nothing to do?

The bots just hit the squares. Depending on the results of thrashing, they either go further, or thrash and thrash.

S

Stanislav Bodrov, 2018-06-30
@jenki

We need a competent specialist. Can't be explained in two words or three paragraphs.

M

Mikhail Yesenin, 2019-01-23
@mirzok

I support about a backup is time.
If all this happened almost simultaneously, then it is worth treating it as a targeted attack, and not an accident, and protecting yourself from phishing is two.
Thirdly, if you are not sure that there are no holes in the site, then do not wait until they are hacked, but scan acunetix.com , metascan.ru , pentest-tools.com from the outside to check for injections, and so on.
As for convicting - alas, here either attract IB forensic experts, or think to whom you annoyed.