He cannot change the name of the website or the business. He has outstanding world-wide press, brand recognition and loyal following in a niche industry that is not necessarily high-margin. The business is so enjoyable one might say it is a labour of love and deep dedication. That's probably all I can say about it.

All ftp's were flooded with .html files of fake goods related to his industry, 8,000 files. That is what I believe the intent was related to. The IP of the originating hack was in China. Note: the files never showed up on the site, they were simply put in the ftp's.

After it was cleaned up by SiteLock and everything looked ok, it was hit with a malicious redirect, a page was put up saying that Flash had to be updated with a link, so I immediately took down the site. As it was explained to me, the only prevention would have been a constantly updated Firewall. We have thought of changing the IP, but I fear that may be a temporary solution given the nature of the files.

Note: It is not a Wordpress site, if that makes a security difference.

Last edited by slolerner; 07/27/15 12:07 AM. Reason: Shorten, clarify