ATTN - Sites hacked

[MewsicLovr]

Hey guys - Just so you know I've had a couple people now come to me just today that have had their Wordpress sites hacked. The script looks to be the same in both cases. Both are upgraded to the latest version (3.0.1). I do not yet know exactly what the attack vector is but I thought I'd let people know that you may want to take a look at your sites and verify everything is ok.

[CasinoMack]

Could be file permissions.

[CorryC]

We had a few Joomla sites hacked...

All the same script

[CK]

This might help some of you guys using wordpress

Simple cleanup solution for the latest Wordpress hack | Sucuri

You also might want to check here for info on the malware

Sucuri - Protect Your Interwebs

[Notspot]

Stupid question here I know, I can feel it as I'm writing it - but how do you know you've been hacked? Is it obvious? or something more devious like just altering your htaccess?

[ramchip]

Stupid question here I know, I can feel it as I'm writing it - but how do you know you've been hacked? Is it obvious? or something more devious like just altering your htaccess?

Sometimes you don't know that is the problem. One of my main sites was hacked which resulted in it losing all rankings in Google. Just a couple of php files had been injected which resulted in hidden spam links which were only visible to Google Bot.

Standard Wordpress installations are IMO simply to open to hacks etc.