problem with ad in my template

Hi,
I am using the Joomla Magazine template. Last Friday, to my surprise, I was informed that my non-profit website redirects to ads (virus/porn ads). After two members told me about the same page (https://picturesofindia.org/fr/blog-fr/41-festival-2017), they clicked on the link from a Facebook post: https://www.facebook.com/PicturesOfIndi ... 5090210942

I asked my host to have a look as I thought it was a virus. They replied the following (I'm translating from French) and that's where I need help. Is this a normal feature in the gk_template? Can the javascript redirect be removed? Please help.

"I think I have identified the origin of the redirection by analysing your website code. Your website was not hacked but your theme apparently has distant code.
1) Your page calls the following javascript file:
https://s3-eu-west-1.amazonaws.com/asse ... gin.min.js
2) The code in that file redirects when some conditions are fulfilled to
http://get.imobilecontent.tk/?utm_mediu ... ws_bb_2&1=
3) The above URL shows "advertisement"
According to the what I can see, the javascript mentioned in point 1 is part of the "cookie consent" of the gk_magazine template.
I can only advise you to turn off this functionality in your theme and look for an alternative if you really need this."

Thanks for your support, sincerely,
Joanie

Hi

Please disable Your Cookie plugin and replace it with some 3rd party. I'm afraid the one template was using got hacked.

Did my template get hacked or everyone using the Magazine template will have the same problem?
If only mine, can it be resolved? How? Would you be able to help?
Also, I looked all around but can't find how to remove this option. Please advise.
Thanks a lot, Joanie

HI

Template was not hacked. Only the Cookie plugin was affected. In fact the plugin stopped existing and hackers has bought same domain to replace it with their code, so simply by not using this plugin site is safe from this attack.

Got it, thanks a lot.
Are you going to update the Template with another cooking plugin? Because that plugin was part of the Template, I didn't install it.
Sincerely,
Joanie

Hi

We've only borrowed the CC plugin. There were no files of it existing in template itself, just the link to a location which was took over by hackers. Templates are updated already and plugin's links were replaced. Please simply update template to the latest version.

Thanks a lot for the explanation, I found out how to and replaced the code for now.
Sincerely, Joanie

Hi

Great to hear it. Closing this thread now.