<div style="background-color: #e0e0e0; padding: 10px 20px;">
<div style="background-color: #f9f9f9; border-radius: 10px; padding: 5px 10px;">
<p>Hello,</p>
<p>
We would like to notify you that we detected the suspicious addition of one or more Super User accounts to your site, [SITENAME]. These new Super User accounts do not seem to have been created through the regular means, i.e. Joomla's &ldquo;Users&rdquo; page. Therefore they have been blocked. The new Super User accounts detected <strong>and blocked</strong> are:
</p>
[INFO]
<p>
<h3>Do I need to worry?</h3>
<p>
Super User accounts have full access to your site. They can modify all content, without any restriction. They can also install software which can access or modify every aspect of your site, including arbitrary files, database content and configuration settings. Only grant Super User access to people you trust.
</p>
<p>
If you are receiving this email it means that these Super User accounts were created outside Joomla's &ldquo;Users&rdquo; page. Typically this means that a hacker found a way to bypass your site's or your server's security and tried to surreptitiously create Super User accounts for themselves. For this reason these accounts were blocked, i.e. they cannot be used to log into your site.
</p>
<p>
It is possible, however, that you do receive this email in error: if you or another Super User did intend to create these Super User accounts and used a third party tool to do that. If this is the case then do not worry. Just log in to your site's administrator backend with your own Super User account, go to the Users page, edit the users listed further above in this email and unblock them.
</p>
<p>
If you or another Super User did NOT intend to create these Super Users we recommend auditing your site and your server for any other signs of anomalous activity.
</p>
<p>Best regards,</p>
<p>The [SITENAME] team</p>
</div>
</div>