Pendragon Compromised, Old Windows Shared Hosting

Message

It looks like Pendragon was compromised over the weekend and all index files replaced with a "Hacked By" message. We haven't been able to find the point of entry yet, so IIS is being disabled.

All replaced files are being restored from backup.

More details and ETA will be posted here once we have them.

Update 17:30: We've found the source and blocked it. We're now waiting for the restore to complete before restarting IIS.

Update 17:55: All files are now restored and all sites are back up and running. If you spot any lingering issues, please let support know.