The site is being hacked. What to do?

Question

SQL

Hello!
Site on Bitrix. Some time ago, applications from the site began to come to the mail that your site had won a cash prize, follow the link to receive it, etc. Bitrix also says that there were several attempts to implement sql. I have a few questions.
1. What to do about it? Strengthen security? If so, what exactly
? 2. Is this a common practice at all? those. why did they suddenly want to hack it - competition or someone just has nothing to do?
3. And of course, is it possible to catch a criminal? (calculation by IP did not help)))

Answer 1

2. Is this a common practice at all? those. why did they suddenly want to hack it - competition or someone just has nothing to do?

The bots just hit the squares. Depending on the results of thrashing, they either go further, or thrash and thrash.

Answer 2

We need a competent specialist. Can't be explained in two words or three paragraphs.

Answer 3

I support about a backup is time.
If all this happened almost simultaneously, then it is worth treating it as a targeted attack, and not an accident, and protecting yourself from phishing is two.
Thirdly, if you are not sure that there are no holes in the site, then do not wait until they are hacked, but scan acunetix.com , metascan.ru , pentest-tools.com from the outside to check for injections, and so on.
As for convicting - alas, here either attract IB forensic experts, or think to whom you annoyed.