WordPress.com

31. kortenkamp
    Member
    Apr 20, 2008, 7:31 AM

    Cohn,

    I am the webmaster of Cinderella.de. As Princo pointed out already our website was hacked and was hosting a split until yesterday, when I received a mail message about this issue (I assume that this was sent by Princo).

    Because our site is fairly high ranked in Google the results show up earlier than those of your own blog. I contacted google and asked them to remove the pages from their index and caches.

    I am sorry that this happened to your content. If this ever happens again you should notify the webmaster of the offending site immediately. A simple email usually suffices to shut down the splog and also helps to fix security issues at the hacked sites.

    Ulli

32. cohn
    Member
    Apr 20, 2008, 7:11 PM

    Thanks Ulli. Your response and explanation combined with Princo's actions were those I had hoped to get from professionals.

33. princo
    Member
    Apr 21, 2008, 12:03 AM

    I'm glad that this issue could be resolved so easily.
    Thanks to Ulli, that he has taken such immediate reaction.

    In the comments above, i posted a link to a special security-report. If you read this report, you will see that the misterious included "banner" points to a server which is part of the Russian Business Networks.

    Really bad guys.

34. dissfunktional
    Member
    Apr 21, 2008, 12:15 AM

    how does it work exactly, did a user just going to the cinderella site cause a problem? I read the link you provided, about how they steal identities, I don't understand how they do it though.

35. princo
    Member
    Apr 21, 2008, 12:50 AM

    Every time you visit a website, your browser (and your system) could be attacked by malicious software. This is a normal risk, and you have to secure your system to avoid potential security issus.

    It is a good idea to turn off javascript, and to use a more secure browser. I use firefox with some special plugins: i.e. noscript and siteadvisor.

    Also, i use linux as my main operating system, patched to the latest actual level.

    The "bad" site tries to install trojan-software. But if you have a well configured system, and didn't install any software from that site, you will not run in problems.

    But it is a good hint, not to visit such bad sites too often ;-)

    And always backup your system.

Topic Closed

This topic has been closed to new replies.