morefuckingmoney

[eman]

JT - fyi

Post over at gg&j

http://www.greenguyandjim.com/board/showthread.php?t=36926

[Bradderzzz]

Oh shit i get the exploit as well :(

[rogue]

not just at the secetary page either, you getit at morefuckingmoney . com as well

[Jock Strap]

I got a heap of virus warnings when I was on the site a few days ago but I'd been having virus problems earlier that day so just assumed it was the same problem. Obviously not.

[REBEL]

Looks like he got injected.

[JP]

Talking to Webair techs about it now. Dunno if JT is back in the UK yet as it goes.

[Cardinal_Sin]

I know he had a iframe on one of his sites recently - My firewall alarm bells rang when I hit one of his sites - Told JT about it and think he removed it - Sounds like he has some cunter running about over his server

[JP]

I know he had a iframe on one of his sites recently - My firewall alarm bells rang when I hit one of his sites - Told JT about it and think he removed it - Sounds like he has some cunter running about over his server
Yes it happened last week & was "all sorted" ... this will be a new attack. Cunters indeed. :S

[ristac]

I know he had a iframe on one of his sites recently - My firewall alarm bells rang when I hit one of his sites - Told JT about it and think he removed it - Sounds like he has some cunter running about over his server Are Iframes bad for allowing access then?

[Bradderzzz]

Are Iframes bad for allowing access then?

No but its an easy way once the hacker is in to use them to add an exploit.

[JT]

Just got back from a few days in Berlin. Been hit with this a few times, the host and me and a couple of others have been trying to find where the exploit it.

Its all cleared but we are still looking where they are getting in.

[Cardinal_Sin]

Are Iframes bad for allowing access then?
They can either ad an exploit, auto shit download, create a link for multi server doss attack, or add their own advertising off of your bandwidth.

[JT]

OK it is starting to look like a couple of wordpress blogs have not been updated to 2.05

So anyone who has wordpress and hasnt updated to the newest version do it now http://codex.wordpress.org/Upgrading_WordPress

[ristac]

OK it is starting to look like a couple of wordpress blogs have not been updated to 2.05

So anyone who has wordpress and hasnt updated to the newest version do it now http://codex.wordpress.org/Upgrading_WordPress This might sound dumb but anyway of telling which version you have?

[eman]

This might sound dumb but anyway of telling which version you have?

It tell syou at the foot of the dashboard page - ie the page you see when you login to admin.

[JT]

This might sound dumb but anyway of telling which version you have?

There was a few on that server running 2.04

[JT]

This might sound dumb but anyway of telling which version you have?

Log in and down the bootom of the first page, you can see it. If its not 2.05 upgrade it

[gawdi]

Mine says
2.0 - 5.16 seconds
cant make out if thats v2.0 or 2.05

[mOBSCENE]

Mine says
2.0 - 5.16 seconds
cant make out if thats v2.0 or 2.05

Upgrade!!! Mine are all 2.0.5 — 0.34 seconds ish

[ristac]

Mine was 2.04 but have upgraded to the 2.05 I do have morefuckingmoney affiliates so I hope it's nothing to do with me having the wrong version.... Did they say what the loop was in versions under 2.05?

[Jock Strap]

Mine was 2.04 but have upgraded to the 2.05 I do have morefuckingmoney affiliates so I hope it's nothing to do with me having the wrong version.... Did they say what the loop was in versions under 2.05?

Yep...looks like its all your fault.
To compensate me for having to reinstall Windows on my computer you must now send me a brand new X-Box 360. :)

[ristac]

Yep...looks like its all your fault.
To compensate me for having to reinstall Windows on my computer you must now send me a brand new X-Box 360. :) Okay will throw in 10 free games too :)