I got Hacked
by Species5618 on Feb.10, 2009, under General
Well this is one very embarrassing day. Given my day job 
The brand new WordPress 2.7 instance I setup for my wife, got hacked
Still not sure how, the access logs are not very conclusive, but someone managed to edit every header.php file under the themes folder and inject a trojan “exploit-iframe.gen.c”
I found a similar story hear. http://photocritic.org/wordpress-exploit-iframe-gen-c/
Yes, I admit I allowed apache write access to the themes folder. which i have now fixed
The Code also included a refernce to “search_bot111″
The searchbot code seems to be a bit of PHP?? to hide the site/trojan from search engines
needless to say i am VERY annoyed
Leave a Reply
-
Howdy. Welcome to blog.species5618.net!
Thanks for dropping by! Feel free to join the discussion by leaving comments, and stay updated by subscribing to the RSS feed. See ya around!
Recent Comments
- Tweets that mention As a planet we must start to be more careful, but Fines/Punishment is not the way to do it - blog.species5618.net -- Topsy.com on As a planet we must start to be more careful, but Fines/Punishment is not the way to do it
- stymaster
on How NOT to wire up PSTN and ADSL
- Stephen Kennedy
on A Day out at Slimbridge Wildfowl & Wetlands Trust
- Persistance of Stupidity (The Proof) - blog.species5618.net on Persistence of stupidity
- Wifey
on Dinglewell School (Infant & Junior) Parents Need An Education
February 10th, 2009 on 22:12
Ooops
[*goes off to check permissions for the shonky setup he's just done*]
February 10th, 2009 on 22:14
this is worth a read
http://wordpress.org/support/topic/242327