2 Big Australian Magazine Website Hacked By 1337MiR. website link, screenshot and mirror link below.
hacked page link:

1. http://www.austrahort.com.au/1337mir.html
2. http://www.businessacumen.biz/1337mir.html

zone-h mirror:

1. http://zone-h.net/mirror/id/21810347
2. http://zone-h.net/mirror/id/21810522

i contacted ┬áthem 3times. they didn’t respond.
there is 26000+ user on businessacumen.biz

screenshot #1:

austrahort.com.au australian magazine website hacked by 1337mir

austrahort.com.au australian magazine website hacked by 1337mir

screenshot #2:

businessacumen.biz australian magazine website hacked by 1337mir

businessacumen.biz australian magazine website hacked by 1337mir

screenshot #3:

businessacumen.biz magazine website hacked by 1337MiR

businessacumen.biz magazine website hacked by 1337MiR

screenshot #4:

businessacumen.biz magazine website hacked by 1337MiR-2

businessacumen.biz magazine website hacked by 1337MiR-2

screenshot #5:

businessacumen.biz magazine website hacked by 1337MiR-3

businessacumen.biz magazine website hacked by 1337MiR-3

POC:

usertable:

DROP TABLE IF EXISTS jos_users;
CREATE TABLE `jos_users` (
`id` int(11) NOT NULL AUTO_INCREMENT,
`name` varchar(50) NOT NULL DEFAULT ”,
`username` varchar(25) NOT NULL DEFAULT ”,
`email` varchar(100) NOT NULL DEFAULT ”,
`password` varchar(100) NOT NULL DEFAULT ”,
`usertype` varchar(25) NOT NULL DEFAULT ”,
`block` tinyint(4) NOT NULL DEFAULT ‘0’,
`sendEmail` tinyint(4) DEFAULT ‘0’,
`gid` tinyint(3) unsigned NOT NULL DEFAULT ‘1’,
`registerDate` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00’,
`lastvisitDate` datetime NOT NULL DEFAULT ‘0000-00-00 00:00:00’,
`activation` varchar(100) NOT NULL DEFAULT ”,
`params` text NOT NULL,
PRIMARY KEY (`id`),
KEY `usertype` (`usertype`),
KEY `idx_name` (`name`)
) ENGINE=MyISAM AUTO_INCREMENT=45366 DEFAULT CHARSET=latin1;

INSERT INTO jos_users VALUES(‘37223’, ‘Apampmackdirm’, ‘Apampmackdirm’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>‘, ‘Registered’, ‘1’, ‘0’, ’18’, ‘2013-09-29 21:33:32’, ‘0000-00-00 00:00:00’, ”, ”);
INSERT INTO jos_users VALUES(‘33738’, ‘Davidc’, ‘Davidc’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Registered’, ‘1’, ‘0’, ’18’, ‘2013-08-29 00:40:14’, ‘0000-00-00 00:00:00’, ”, ”);
INSERT INTO jos_users VALUES(‘33739’, ‘Deborahc’, ‘Deborahc’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Registered’, ‘1’, ‘0’, ’18’, ‘2013-08-29 00:45:07’, ‘0000-00-00 00:00:00′, ”, ”);
INSERT INTO jos_users VALUES(’65’, ‘Mike Moloney’, ‘mike.moloney’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Super Administrator’, ‘0’, ‘1’, ’25’, ‘2008-12-08 17:10:26’, ‘2010-01-15 15:39:49’, ”, ‘editor=\nexpired=\nexpired_time=’);
INSERT INTO jos_users VALUES(‘453’, ‘Lee Valentine’, ‘lee.valentine’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Registered’, ‘1’, ‘0’, ’18’, ‘2009-05-22 16:58:35’, ‘2009-05-22 16:58:35’, ”, ”);
INSERT INTO jos_users VALUES(‘40392’, ‘Lrsxsipbh’, ‘Lrsxsipbh’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Registered’, ‘1’, ‘0’, ’18’, ‘2013-10-27 08:26:28’, ‘0000-00-00 00:00:00′, ”, ”);
INSERT INTO jos_users VALUES(’71’, ‘Mike Sullivan’, ‘mike.sullivan’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Super Administrator’, ‘0’, ‘0’, ’25’, ‘2008-12-20 21:31:23’, ‘2014-02-24 13:43:03’, ”, ‘editor=\nexpired=\nexpired_time=’);
INSERT INTO jos_users VALUES(’68’, ‘Michael Moloney’, ‘mike.user’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Business News Releases’, ‘0’, ‘0’, ’33’, ‘2008-12-09 10:12:57’, ‘2009-08-28 12:40:17’, ”, ‘editor=’);
INSERT INTO jos_users VALUES(’79’, ‘Katherine Ashcroft’, ‘katherine.ashcroft’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Subscribers’, ‘0’, ‘0’, ’32’, ‘2009-01-21 00:22:12’, ‘0000-00-00 00:00:00’, ”, ”);
INSERT INTO jos_users VALUES(‘40389’, ‘carpinteyroyge’, ‘carpinteyroyge’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Registered’, ‘1’, ‘0’, ’18’, ‘2013-10-27 08:02:45’, ‘0000-00-00 00:00:00′, ”, ”);
INSERT INTO jos_users VALUES(’70’, ‘Deirdre Lynch’, ‘deirdre.lynch’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Super Administrator’, ‘0’, ‘0’, ’25’, ‘2008-12-18 15:24:00’, ‘2014-02-16 20:15:42’, ”, ‘editor=\nexpired=\nexpired_time=’);
INSERT INTO jos_users VALUES(’77’, ‘Les Hall’, ‘les.hall’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Subscribers’, ‘0’, ‘0’, ’32’, ‘2009-01-21 00:22:12’, ‘2009-01-21 00:39:43′, ”, ”);
INSERT INTO jos_users VALUES(’73’, ‘Sergio Maresca’, ‘[email protected]’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Subscribers’, ‘0’, ‘0’, ’32’, ‘2009-01-13 11:10:17’, ‘0000-00-00 00:00:00’, ”, ‘editor=’);
INSERT INTO jos_users VALUES(’80’, ‘Anthony Caldwell’, ‘anthony.caldwell’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Subscribers’, ‘0’, ‘0’, ’32’, ‘2009-01-21 00:22:12’, ‘0000-00-00 00:00:00′, ”, ”);
INSERT INTO jos_users VALUES(’81’, ‘Nic De Luca’, ‘nic.deluca’, ‘[email protected]’, ‘<<# MD5 Hash Here#hide for security reason#>>’, ‘Subscribers’, ‘0’, ‘0’, ’32’, ‘2009-01-21 00:22:12’, ‘2009-01-21 00:41:10’, ”, ”);[…..]

right now both website redirected to my website.
checkout my 3 new deface page. page-1, page-2, page-3