[wp-hackers] Hacked blogs

[Joost de Valk]

Harish Narayanan wrote:
> Joost de Valk wrote:
>    
>> Hey guys,
>>
>> I've been restoring 5 hacked blogs the last few days, all running 2.7.1
>> but spread over different hosts, can't find the hole yet that they're
>> getting in through, but I'd thought I'd send out a warning to all of you
>> that something seems to be wrong...
>>      
>
> Even if you aren't aware of the cause, could you point us to the
> symptoms so we would know what to look for?
>
> Thanks,
> Harish
>
>    
Sorry, should have included that immediately.

Symptoms were, in all cases, iframes being added to the end of all 
index.php files in the blogs, in the footer. In some cases they were 
written with javascript, in other cases they were pure iframes.

Best,
Joost