Take a look at wijkraad-hulst-zuid.nl
it is template classic
after installing astroid version 12 there is nothing to see. astroid is empty and before it was not
how to solve this

before the update i did not backup or so anything in astroid (got no warning)

They were hacked!!!:

www.joomlaplates.de/forum/news-updates-u...ame-seite.html#14102
 

Question: i found one of the dirty plugins. so deinstalled the whol joomla. But how about when i install the astroid framework from your site (after downloading it) Does that mean that evry updat from nr 12 does contain these hacks? I checked all the other joomlas i have (ftp) and did not find the dirty pluginnames. So i want to know how to go further with updating

All websites must be updated to Astroid 3.3.12 immediately. Afterwards, the backend should be additionally secured with an .htaccess password. Where the plugins were not installed, there had been no hack up to that point.

strange is that the issue came after updating to Astroid 3.3.12 which i downloade from joomlaplates. And how do i do the things securing with an .htaccess passord?

Then just Google it. There are plenty of tutorials on how to do that with an .htaccess password. I must categorically deny that you only got the hack after the update to 3.3.12. The vulnerability was closed with 3.3.12!

Astroid is open source and not from Joomlaplates:
astroidframe.work/blog/update-astroid-fr...rity-vulnerabilities