Since long time I have been noticing some weird activity going on on my website.
includesfolder was deleted
- CSS files were modified
- Node edit access was given to anonymous users
I was thinking it could be human error by my team, but I can confirm they are not doing anything as such because they are just updating the content without touching the site configuration.
I see these users which we never created:
They show as blocked users and I don't see any content created by them. I searched for the email ids and found they are marked as spammers but dont know what it is. These things are really worrying me. Does anyone know what might be going on?
Is my website hacked?
few minutes after posting this (and after deleting above users) this user is crated