Hacked in a different way
Permalink
Im gonna fix this in a few minutes but...
Has anyone seen this kind of hack before?
Go here:http://www.vwa.org.au/
Click: About > Contact (link in sidebar)
Submit form.
Thank you page page links will now all link to Canadian Viagra site.
Page code looks clean.
How is this getting hijacked?
{{ update: repair underway }}
Has anyone seen this kind of hack before?
Go here:http://www.vwa.org.au/
Click: About > Contact (link in sidebar)
Submit form.
Thank you page page links will now all link to Canadian Viagra site.
Page code looks clean.
How is this getting hijacked?
{{ update: repair underway }}
Very strange.....
This page:www.www.vwa.org.au/index.php?cID=134... looks normal. This is the pre-edit file attached. Put it in edit mode and then exit edit mode and the code looks like the attached "post-edit.txt" file.
Repairing now. I hope.
downloading packages and files directories from server and Ive got a "virus".
Sophos gives mehttp://www.sophos.com/en-us/threat-center/threat-analyses/viruses-a...
Apparently in a file called "s.php". Im trying to find out exactly where that is now.
Sophos gives mehttp://www.sophos.com/en-us/threat-center/threat-analyses/viruses-a...
Apparently in a file called "s.php". Im trying to find out exactly where that is now.
