Cold Case Posse web site down–third time is a charm edition

Having your web site not working is a real downer—I know from experience. However, I’ve never had one hacked yet in all the years I’ve had web sites, both my own, non-profit and business sites. Being hacked has got to be worse than being down because not only are not serving your readers, you’re embarrassed and you have to figure out how to clean it up.

Here’s a screen shot (click to enlarge) of the hacked CCP web site, and I would caution folks against visiting a known hacked web site. I visited this one with an special device I use for such things.

When the actual page is viewed “techno punk” music is played and the band of multi-colored text scrolls with some sort of credits. The style reminds me of Eastern European graphics demo software from the 1980’s.

If you Google “I’m sorry Admin Touch” or “KEHED_NEWBIE” you will find of other web sites compromised in a similar way. It looks like this particular attack is directed at sites using the Content Management System (CMS), Joomla. One site noted about Joomla:

It’s probably the only CMS with the most exploits and vulnerable addons ever made, and sometimes I wonder who creates all these.

My guess is that the MCSOCCP site didn’t keep up to date with its security patches.

Other articles on Joomla:

• Joomla Exploit Results In Thousands Of Infected Systems, Targeted Attacks Against EMEA Banks
• Database of Joomla exploits
• Simple Hack Threatens Outdated Joomla Sites