I read at pinoyblogosphere that a joomla 1.5xx site was hacked.   I check out the guy’s website  cebubusinessforum.com and found out that the words “the.bilen” on the defaced website.  I checked google to see what other sites has been hacked by this hacker and found out that the forum area of Philippine Stock Exchange has been hacked.

The above is a screen capture of  http://www.philippinestockmarket.com/Forum/default.asp  as of today Sept. 11, 2008 9:00am.

Based from the other sites, it seems that it a lot of the defacing and hacking was done by turkish hackers.  I think “the.bilen” is a script that is being used by these hackers as well as RootHack.