Website Hacks on Aspro: Protection Measures and Recommendations

10.02.2025

Cyberattacks on businesses and users continue to intensify. Websites running on various CMS platforms, including Bitrix, are also at risk. In the fall of 2024, numerous publications reported newly discovered vulnerabilities, and technical support requests related to hacks increased significantly.

The situation is repeating now. As a web studio, we notify website owners about the risks of cyberattacks and the importance of timely protection. We explain why this happens and how you can secure your project.

How to prevent a website hack

Vulnerabilities were identified and fixed in updates released in the summer of 2023. The details of the fixes were not disclosed to prevent attackers from exploiting them. These issues are absent in current versions; however, projects running on outdated versions or migrated to new solutions with errors remain vulnerable.

We recommend renewing your license on time and installing updates to avoid security risks.

The following measures were taken:

Instructions were created to help owners of outdated solutions fix vulnerabilities.
Recommendations on updating projects were published for users of current versions.
Notifications were added to the administrative panels of websites.

However, not all website owners receive updates in time, and some do not have the technical or financial ability to apply them immediately. We understand this and offer solutions to protect your website even if updating is not currently possible.

You must fix the vulnerability if your website:

is running on a version that is no longer supported;
hasn’t been updated since summer 2023;
was migrated from an older solution.

Patcher for fixing vulnerabilities

A patcher has been developed that automatically scans the website, identifies vulnerabilities, and fixes them. You only need to download, install, and run it. This allows you to protect your website without editing code, updating the system, or losing custom settings. A detailed guide is available via the button below.

Download patcher

Manual vulnerability removal

If using the patcher is not suitable, the vulnerability can be fixed manually. You can also contact technical support at web@oneit.kz. Owners of an active license can get a free consultation with specialists. Choose your solution and follow the instructions.