Comments on: More Info on the WordPress AnyResults.net Hack for Hijacking Search Traffic

By: admin

admin — Mon, 09 Jun 2008 12:47:50 +0000

Donncha: Yeah, I sure did. Thanks for your response — it’s reassuring to know that this problem is a thing of the past. I’m still working to tighten a few more things up, though. You can never be too careful!

By: Donncha O Caoimh

Donncha O Caoimh — Mon, 09 Jun 2008 09:18:07 +0000

nickel – hope you saw my reply to your comment. I would be very confident that those WP 2.5.1 blogs that were hacked were probably exploited before they were upgraded. The hackers just lay in wait until last week to launch this latest wave.

I wouldn’t be surprised if there was a third wave of attacks on already exploited blogs.

By: DT

DT — Sun, 08 Jun 2008 18:04:47 +0000

I haven’t been affected by the index.php code, but I did have the image, when you opened the image in notepad you can see the PHP code and encrypted code aswell.

If you want a copy of this let me know.

You have my email address but would prefer not to link to my blog right now.

By: admin

admin — Sun, 08 Jun 2008 14:03:59 +0000

Hi Mark: Thanks for stopping by again.

I already left a comment at donncha.wordpress.com — is that the right place? I’m not sure how else to contact him. He’s not accepting direct messages via Twitter.

By: Mark

Mark — Sun, 08 Jun 2008 14:00:31 +0000

Okay. If you say so.

Go tell Donncha at his blog? After all, you do want to help others?

By: admin

admin — Sun, 08 Jun 2008 13:00:25 +0000

Mark: Hah! Try telling that to the people running WordPress 2.5.1 that have been hacked. That link to Donncha’s twitter is wrong. I personally know several people running 2.5 and 2.5.1 that have been hacked. The details are slightly different, but it’s the same end result.

Go here for an example.

By: Mark

Mark — Sun, 08 Jun 2008 11:26:24 +0000

It does not affect 2.5.1

http://twitter.com/donncha/statuses/829681288