I got hacked !By L&J Team!
 

Was hacked by a so-called Muslim group that call themselves L&J TeaM!

I did not have install.php in my account and all my passwords are alphanumeric with special characters. I have myself set as an undeletable member in config.php. I am left scratching my head on this. I'm working with my host as we speak to rectify the problem. I was hacked right at midnight tonight. I run a cron job to make a daily backup, so I'm hoping the loss of data will be minimal. I really would like to be better educated on how to lock down .htaccess and anything else I can do to prevent this from happening ago. I also have 3 regular Admins and I'm hoping it wasn't because someone on my staff was using a weak password.

Anyone else have any experience with these particular hackers? What should I be doing right now other than waiting on support to respond to my ticket? Does this mean they gained access to my AdminCP or went in via FTP? Could this be a CHMOD problem?

Any advice would be very much appreciated.

If you want to check out the nice little page they created here is what is supposed to be my home page. http://www.usamustangs.com

- Tim