Mass Wordpress hack attacks - GoFuckYourself.com

wizzart · 06-12-2008, 04:16 AM

Read This!

The Duck · 06-12-2008, 04:32 AM

thats bad, gotta check my sites

viencarl · 06-12-2008, 04:37 AM

wow thats disturbing man!!!

Darkhorse · 06-12-2008, 05:26 AM

Makes me glad I don't run WP on my blogs, being so popular big target for hackers.....

Agent 488 · 06-12-2008, 07:05 AM

fixes:

http://www.getrichslowly.org/blog/20...sultsnet-hack/

http://it.youtube.com/watch?v=Obqa6jDV-WQ

http://ocaoimh.ie/2008/06/08/did-you...te-get-hacked/

tranza · 06-12-2008, 09:45 AM

i´m gonna check my site!

nico-t · 06-12-2008, 11:03 AM

goddamnit...

sumphatpimp · 06-12-2008, 11:07 AM

wordpress is the script kiddies dream

2012 · 06-12-2008, 11:09 AM

uh oh .....

jollyperv · 06-12-2008, 11:14 AM

I'm sick of this fucking shit, having to upgrade once a week on a shitload of blogs is a serious pain in the ass...let's talk about alternatives...

Also, would limiting server and mysql access to only my IP address solve this problem, or is there a way to hack through it?

qxm · 06-12-2008, 11:19 AM

nice post ... thread bookmarked!

nico-t · 06-12-2008, 12:22 PM

Quote:

Originally Posted by jollyperv

I'm sick of this fucking shit, having to upgrade once a week on a shitload of blogs is a serious pain in the ass...let's talk about alternatives...

Also, would limiting server and mysql access to only my IP address solve this problem, or is there a way to hack through it?

i agree, and they way of updating is a fucking pain in the ass... some kind of automatic update system is really needed.

tony286 · 06-12-2008, 02:24 PM

Quote:

Originally Posted by Darkhorse

Makes me glad I don't run WP on my blogs, being so popular big target for hackers.....

What do you use, Im use going to start learning blogging and would rather invest my time in something that isnt buggy and easy to fuck with.

Varius · 06-12-2008, 03:26 PM

Quote:

Originally Posted by nico-t

i agree, and they way of updating is a fucking pain in the ass... some kind of automatic update system is really needed.

There is a Plugin called "Wordpress Automatic Upgrade" and it works well I've been using it for few upgrades now no errors/bugs.

u-Bob · 06-12-2008, 03:28 PM

Quote:

Originally Posted by Darkhorse

Makes me glad I don't run WP on my blogs, being so popular big target for hackers.....

said it before and will say it again: "running wordpress = waiting to get fucked in the ass".

Varius · 06-12-2008, 03:29 PM

I noticed last week my google traffic to my Anaheim Ducks blog was off, but figured was due to the offseason, but it turns out this exploit was probably the case. I found a bunch of invisible gambling links in my index page. Now I've patched and cleaned the site back up but have to 'request review' with Google to get back to clean status hopefully. Which sucks, since for many terms I'm #1-3 on Google above sites like NHL and TSN and AnaheimDucks.com

BTW this site may be helpful for those wishing to check links to any badware, since Google/Stopbadware.org aren't very helpful when they block you.

http://www.bad-neighborhood.com/text-link-tool.htm

Babaganoosh · 06-12-2008, 03:31 PM

Quote:

Originally Posted by u-Bob

said it before and will say it again: "running wordpress = waiting to get fucked in the ass".

...and automatically creating blogger/blogspot blogs is a solid business practice?

Agent 488 · 06-12-2008, 03:39 PM

Quote:

Originally Posted by Varius

BTW this site may be helpful for those wishing to check links to any badware, since Google/Stopbadware.org aren't very helpful when they block you.

http://www.bad-neighborhood.com/text-link-tool.htm

since adult links are considered bad - it's not useful around these parts.

Varius · 06-12-2008, 03:41 PM

Quote:

Originally Posted by budsbabes

since adult links are considered bad - it's not useful around these parts.

It can still find hidden links in your page like it did for me. ie. I know I don't link to any gambling sites from my hockey blog, so when it found like 200 direct links that all sounded gambling related, that's how I was alerted to the hack (then did a quick DB search to find the posts they were inserted in).

jollyperv · 06-12-2008, 05:22 PM

Quote:

Originally Posted by Varius

I noticed last week my google traffic to my Anaheim Ducks blog was off, but figured was due to the offseason, but it turns out this exploit was probably the case. I found a bunch of invisible gambling links in my index page. Now I've patched and cleaned the site back up but have to 'request review' with Google to get back to clean status hopefully. Which sucks, since for many terms I'm #1-3 on Google above sites like NHL and TSN and AnaheimDucks.com

BTW this site may be helpful for those wishing to check links to any badware, since Google/Stopbadware.org aren't very helpful when they block you.

http://www.bad-neighborhood.com/text-link-tool.htm

Do you happen to have that request review link? I had a blog dropped a few months back because the motherfucker was double pinging somehow.

jollyperv · 06-12-2008, 05:23 PM

So....alternatives anyone?

MikeB · 06-12-2008, 06:18 PM

in your themes also check your header.php file.

nightsurfing · 06-12-2008, 06:26 PM

Quote:

Originally Posted by jollyperv

Do you happen to have that request review link? I had a blog dropped a few months back because the motherfucker was double pinging somehow.

Here is the link:
https://www.google.com/webmasters/tools/dashboard

One of my sites was hacked, I had to upgrade wordpress, and edit each post and remove links. I then submitted my site for google review and warning was removed within 24 hours. Now I am back where I was in google prior to the hack.

BetChips · 06-12-2008, 08:27 PM

I also bookmarked, A ton of my sites have been hacked and thrown out of results. Very depressing.

tony286 · 06-12-2008, 10:28 PM

bump other options than wp?

potter · 06-12-2008, 11:50 PM

bump, this sucks

Darkhorse · 06-13-2008, 03:07 AM

Quote:

Originally Posted by tony404

What do you use, Im use going to start learning blogging and would rather invest my time in something that isnt buggy and easy to fuck with.

Hit me on ICQ (see sig) can show you backend and talk further there.

nico-t · 06-13-2008, 04:43 AM

Quote:

Originally Posted by Varius

There is a Plugin called "Wordpress Automatic Upgrade" and it works well I've been using it for few upgrades now no errors/bugs.

thanks

Jai · 06-16-2008, 04:59 PM

yea i know of a few big guys gettin hacked with cialis linx

Finike · 06-17-2008, 01:34 AM

It is a good idea to save your blogs using the export function to your local hard drive regularly

Sarah_Jayne · 06-17-2008, 02:28 AM

It feels like it always something. I spent a good chunk of the end of last week going through all of my blogs and altering things so comments are no longer allowed at all due to just the total flood of blank comment spam I was getting.

06-12-2008, 04:32 AM	#2
The Duck Adult Content Provider Industry Role: Join Date: May 2005 Location: Europe Posts: 18,243	thats bad, gotta check my sites __________________ Skype Horusmaia ICQ 41555245 Email [email protected]

06-12-2008, 04:37 AM	#3
viencarl Confirmed User Join Date: May 2007 Posts: 4,234	wow thats disturbing man!!! __________________ Tubebingo Tube Profiles NSA Cams Free Teen Porn Blog Teen Boobs Blog Webcam Sex Post Younger Babes Blog Interracial Sexguide Asian Models Blog Sugar Babes Blog Woman Single Hardcore Sexpost Showbiz Pimp Teen Nude Blog Anime Babes Blog Teen Panties Blog Hot Babes Pimp My Daily Teen Blog Teen Bikini Blog Tubebingo Blog

06-12-2008, 09:45 AM	#6
tranza ICQ: 197-556-237 Join Date: Jun 2003 Location: BRASIL !!! Posts: 57,559	i´m gonna check my site! __________________ I'm just a newbie.

06-12-2008, 11:09 AM	#9
2012 So Fucking What Industry Role: Join Date: Jul 2006 Posts: 17,189	uh oh ..... __________________ best host: Webair \| best sponsor: Kink \| best coder: 688218966 \| Go Fuck Yourself

06-12-2008, 11:14 AM	#10
jollyperv Confirmed User Industry Role: Join Date: Nov 2001 Location: NYC Posts: 3,927	I'm sick of this fucking shit, having to upgrade once a week on a shitload of blogs is a serious pain in the ass...let's talk about alternatives... Also, would limiting server and mysql access to only my IP address solve this problem, or is there a way to hack through it? Last edited by jollyperv; 06-12-2008 at 11:15 AM..

06-12-2008, 04:16 AM	#1
wizzart scriptmaster Industry Role: Join Date: May 2006 Location: Serbia Posts: 5,237	Mass Wordpress hack attacks Read This!

06-12-2008, 05:26 AM	#4
Darkhorse Horsing Around Industry Role: Join Date: Sep 2002 Location: AU Posts: 5,864	Makes me glad I don't run WP on my blogs, being so popular big target for hackers.....

06-12-2008, 07:05 AM	#5
Agent 488 Registered User Industry Role: Join Date: Feb 2006 Posts: 22,511	fixes: http://www.getrichslowly.org/blog/20...sultsnet-hack/ http://it.youtube.com/watch?v=Obqa6jDV-WQ http://ocaoimh.ie/2008/06/08/did-you...te-get-hacked/

06-12-2008, 11:03 AM	#7
nico-t emperor of my world Join Date: Aug 2004 Location: nethalands Posts: 29,903	goddamnit...

06-12-2008, 11:07 AM	#8
sumphatpimp Confirmed User Join Date: Aug 2002 Posts: 5,235	wordpress is the script kiddies dream

06-12-2008, 11:19 AM	#11
qxm Confirmed User Join Date: Jul 2006 Location: NoHo Posts: 5,970	nice post ... thread bookmarked! __________________ ICQ: 266990876

06-12-2008, 03:29 PM	#16
Varius Confirmed User Industry Role: Join Date: Jun 2004 Location: New York, NY Posts: 6,890	I noticed last week my google traffic to my Anaheim Ducks blog was off, but figured was due to the offseason, but it turns out this exploit was probably the case. I found a bunch of invisible gambling links in my index page. Now I've patched and cleaned the site back up but have to 'request review' with Google to get back to clean status hopefully. Which sucks, since for many terms I'm #1-3 on Google above sites like NHL and TSN and AnaheimDucks.com BTW this site may be helpful for those wishing to check links to any badware, since Google/Stopbadware.org aren't very helpful when they block you. http://www.bad-neighborhood.com/text-link-tool.htm __________________ Skype variuscr - Email varius AT gmail

06-12-2008, 05:23 PM	#21
jollyperv Confirmed User Industry Role: Join Date: Nov 2001 Location: NYC Posts: 3,927	So....alternatives anyone?

06-12-2008, 06:18 PM	#22
MikeB Confirmed User Join Date: Feb 2002 Posts: 2,012	in your themes also check your header.php file.

06-12-2008, 08:27 PM	#24
BetChips Confirmed User Join Date: Aug 2007 Posts: 643	I also bookmarked, A ton of my sites have been hacked and thrown out of results. Very depressing.

06-12-2008, 10:28 PM	#25
tony286 lurker Industry Role: Join Date: Aug 2002 Location: atlanta Posts: 57,021	bump other options than wp?

06-12-2008, 11:50 PM	#26
potter Confirmed User Industry Role: Join Date: Dec 2004 Location: Denver Posts: 6,559	bump, this sucks __________________

06-16-2008, 04:59 PM	#29
Jai Confirmed User Join Date: May 2005 Location: http://www.fitnesspornbabes.com Posts: 6,915	yea i know of a few big guys gettin hacked with cialis linx

06-17-2008, 01:34 AM	#30
Finike Confirmed User Industry Role: Join Date: Mar 2005 Location: Austria Posts: 1,581	It is a good idea to save your blogs using the export function to your local hard drive regularly __________________ Pregnant, fetish or tit traffic? Promote Lactation Cash, a CCBill based lactation niche program with better signup and rebill ratios! Trade traffic: SexyPix TGP - Milky TGP - Lactation Sex TGP - So Sexy Nylons - Sexy Bra TGP - 6 Fetish Tube - All my traffic trades !

06-17-2008, 02:28 AM	#31
Sarah_Jayne Now with more Jayne Industry Role: Join Date: Dec 2002 Location: Los Angeles Posts: 40,077	It feels like it always something. I spent a good chunk of the end of last week going through all of my blogs and altering things so comments are no longer allowed at all due to just the total flood of blank comment spam I was getting.