Once inside the sites they made unauthorised modifications, including adjustments to security settings, control of access to and distribution of confidential data, and re-directing visitors to websites hosted by hackers.
[