Help to Drupal websites recover from being compromised
11/02/2014 - 12:05
This information is useful should your Drupal site get compromised. Please report any details to the security team at firstname.lastname@example.org The security team is unable to help with individual sites, but does like to keep track of compromised sites to see patterns. Resume: Step 1: Make a forensic copy of the site Step 2: Decide to keep, rollback, rebuild, or throw the site away. Step 3: Who should you notify? Step 4: Should you take the site offline? Step 5: Begin investigating the attack Step 6: Revisit the question: remediate, rebuild, or trash the site?