[wp-hackers] Hacked blogs

Joost de Valk joost at yoast.com
Thu Mar 26 12:56:27 GMT 2009

Harish Narayanan wrote:
> Joost de Valk wrote:
>> Hey guys,
>> I've been restoring 5 hacked blogs the last few days, all running 2.7.1
>> but spread over different hosts, can't find the hole yet that they're
>> getting in through, but I'd thought I'd send out a warning to all of you
>> that something seems to be wrong...
> Even if you aren't aware of the cause, could you point us to the
> symptoms so we would know what to look for?
> Thanks,
> Harish
Sorry, should have included that immediately.

Symptoms were, in all cases, iframes being added to the end of all 
index.php files in the blogs, in the footer. In some cases they were 
written with javascript, in other cases they were pure iframes.


More information about the wp-hackers mailing list