Unauthorized changes in default stylesheet of shaper_educon

Hello,

Thanks for reaching out to us.

Please, make sure your template is up to date, Also, Check any unwanted files here or not, Please, follow this steps,

1. Go to Site Template Styles → Your Template → Template Options → Custom Code → Custom JavaScript.
2. Check for any suspicious or unknown JavaScript code and remove it. This should remove the injected message if it was added through the template's Custom JavaScript field.
3. After that, please update both the System - Helix3 Framework plugin and the Helix3 - Ajax plugin to the latest version (v3.1.2).

If you do not see an update notification in your Joomla dashboard, you can download the latest Helix3 package from the following page and install it via Extensions → Install:

https://www.joomshaper.com/joomla-templates/helix3

If you think your site is compromised then follow this steps:

Please follow the cleanup guide from here: https://www.joomshaper.com/forum/question/45152

You can also use the following security scanner to help identify malicious files and delete them: https://github.com/zkrana/joomla-security-scanner

Please make sure to read the README.md file in the repository for instructions on how to run the tool.
After completing the cleanup and upgrading to v6.6.2, please let us know the outcome or if you need any further assistance.

We'll be happy to help.
Thank you.

Hola Alejandro,

And yes, after all the above steps, strongly consider installing a firewall component anyway. An extra security guard is always needed in those times. There are few solutions for Joomla.

It’s great to hear that your issue has been resolved.
If everything is working fine now, please mark the question as complete by accepting any of our answers.

Thank you!