Modx being used in Phising scheme

Hello everyone,

A couple of years ago I delivered a website to a client where I used modx (version back then was 0.9.6 I think:)) and he hasn’t upgraded since. Now he received a notice from Godaddy that he has been implicated in a phising scheme.

I need help - I can’t figure out how they get in there, and the only thing Client/Godaddy could supply me was this link:
http://www.watershape.com/manager/media/style/1_source.php
So it looks like it’s this folder it resides in. I’ll be honest - I know next to nothing about how to go about this.

Help?

Best,
Soren

Hi ganeshXL - how are you. It’s Soren here from LA

That link is all I got. I know it simply just takes you to the warning page. This is because his site now taken off-line.

You and I know each other, so if you want I can give you some login info on via our private emails?

Thanks,
Soren G

You got it - go to bed Talk tomorrow.