I think I have been hacked - site 4 days old!

Server Config
1

Okay, this is crazy.

I have just started building a website, it is about 4 days old. And today I found a file on the server I didn’t recognize. It was just an HTML file, but inside it said:

HackeD||HBD Voo XD here’s a gift for you

So… what does this mean. Does this person have direct access to the server?

I have no idea how a) they did it and b) how they even found my site.

I have sent a support request to my host.

2
  1. Is their any sort of CMS being used or is the site just static HTML pages?
  2. Is the server that the site is on shared with other sites?
  3. If a CMS is in use, is it the most up to date version of that CMS?
  4. Have you changed your FTP password?

They may well have found the site via a search engine, sometimes it doesn’t take long for a site to get indexed.

3

In most cases it is not someone targeting you specifically. It could be an automated scanner guessing FTP/CMS credentials or it can be that your PC is infected with malware.
The best advice is to replace all passwords with long and strong passwords and to run an AV scan on your PC.
If you have access logs to your machine, it might be a good place to start looking but again, in most cases it is more of a random thing than someone targeting you or your site.