Thread: Hacked?

It was an exploit in a orphaned software we still use for legacy reasons and we missed a security advisory because an email address wasn't updated to our current one. (It's nothing like the youtube video that was posted where they access the full server.)

It's a silly hack - replaced the home page with a different one, nothing else was compromised (we have a reasonably good security to prevent big bad things.) They left large footprints in the process so it wasn't anybody moderately knowledgeable (there are ways to leave much smaller footprints for this specific type of attack.)
Trivial to restore as well but we had to make sure the exploit was closed, verify the extent of the compromise and double check that everything is fine before allowing everybody back in again. And that takes time regardless of the reason for doing it.