Tamer Zoubi @ Drupal 8


Drupal expert | Programmer

SA-CORE-2014-005

Drupageddon - Updating to Drupal 7.32 is not enough, your site may already be hacked!

Following up on the Drupageddon, I noticed something weird on one of my servers. While patching sites to Drupal 7.32, I noted that on some of the sites database.inc was already updated with todays date! I was sure nobody made the change so I went into investigating this more.

I made a diffcheck via git and discovered there was additional file on my server!

Tags
Drupageddon
Drupal 7
SA-CORE-2014-005