Need help - 3 of my Concrete5 Sites have been hacked

Permalink
It appears that all 3 of my Concrete5 sites have been hacked.
I am not a designer/builders, so I don't know the code, but I do maintain them. This is the first time I've ever dealt with a website being hacked in 8 years, and it only appears to be with Cncrete5.

There hyperlinks appearing in the text that have popups.

I contacted the Hosting company, BlueHost, and they said they were not aware of any "hacking" on their server.

They suggested I contact a company called: "wewatchwebsites.com" for help and also use one of the affiliates "SiteLock".

Does anyone have any advice for me on this?

The sites are:

http://www.cbwalkerstables.com
http://www.kmwebdesign.com
www.www.thecellardoorbistro.com...

I would appreciate any help or direction.

Thank yhou.

jaxter45
 
mhawke replied on at Permalink Reply
mhawke
I'm having a hard time spotting the problems with your sites. Can you elaborate what I should look for?

Changing your FTP password is the first thing you need to do right away. Also, I know it makes life easier but don't store your passwords in your FTP program. Your development computer can get maleware on it that seeks out your FTP passwords so it might not have anything to do with Bluehost. I even had my development computer hacked once and they made changes their devious changes to my local files so I was the one who uploaded the hacked files to my own server. Try explaining that to a client!