Monthly Archives: July 2010

UFC.com blacklisted by Google (indirectly)

Posted on July 31, 2010 by dd

Anyone trying to visit the site UFC.com (from Google Chrome or Firefox) will get a big scary warning from Google: Warning: Visiting this site may harm your computer! The website at www.ufc.com contains elements from the site bin.clearspring.com, which appears … Read more


Posted in blacklist, ufc.com | Tagged , | 3 Comments

Vulnerability in Vbulletin 3.8.6

Posted on July 21, 2010 by dd

If you are running Vbulletin 3.8.6 (the latest 3.8.x version), make sure to remove the faq.php as soon as possible. A vulnerability has been found that allows anyone to retrieve the database credentials from there. The VBSEO team was quick … Read more


Posted in vbulletin, vulnerability | Tagged , | 2 Comments

Yet another series of attacks – This time using whereisdudescars.com

Posted on July 17, 2010 by dd

Update 1: It seems that this attack is limited to only Bluehost and Dreamhost, not GoDaddy like in the previous times. Update 2: This script should fix/clean an infected site: site fix.php Update 3: Attackers are using nowisisdudescars.com and onlineisdudescars.com … Read more


Posted in hacked, malware | Tagged , | 12 Comments

Fox News Website Hacked

Posted on July 14, 2010 by Dre Armeda

We reported yesterday evening that various sites in the Fox web network have been infected with the Pharma Hack. It doesn’t stop there. I just ran some scans on the official Fox News site (foxnews.com) and here are the results:


Posted in hacked, malware, spam | Tagged , , | 5 Comments

Various Fox Websites Hit With Pharma Hack

Posted on July 13, 2010 by Dre Armeda

If you’ve been following Sucuri, you’ve seen a bunch of discussion around the steadily growing Pharma Hack. As we continue research on the issue we find more and more variations of the exploit. Earlier this evening, we started noticing various … Read more


Posted in hacked, pharma, spam | Tagged , , , | 1 Comment

Understanding and cleaning the Pharma hack on WordPress

Posted on July 13, 2010 by dd

In the last few weeks, the most common questions we’re receiving are related to the “Pharma” (or Blackhat SEO Spam) Hack on WordPress sites. This attack is very interesting because it is not visible to the normal user and the … Read more


Posted in hacked, spam, wordpress | Tagged , , | 30 Comments

Nagios Community Site Hacked

Posted on July 13, 2010 by dd

We just detected (via our scanner) that the Nagios community site (community.nagios.org) has been hacked and is redirecting to a Viagra site. The results vary depending on the page request. If you try to visit any page and add a … Read more


Posted in hacked, nagios, spam | Tagged , , | 2 Comments

Israel’s permanent mission in the UN web site hacked

Posted on July 9, 2010 by dd

As we dig into this blackhat SEO spam network, we are finding more and more sites hacked by them. One of the sites we discovered is the http://israel-un.mfa.gov.il (Israeli permanent mission in the UN). It is probable they’ve been exploited … Read more


Posted in hacked, security, spam | Tagged , , | 2 Comments

Argentinean Government web sites hacked with spam

Posted on July 8, 2010 by dd

We recently blogged that many sites from the Brazilian government got hacked and were being used as part of a large blackhat SEO spam network. Well, the Brazilians are not alone and many web sites from the Argentinean government got … Read more


Posted in argentina, hacked, malware, spam | Tagged , , , | 1 Comment

osCommerce users, update your installations as soon as possible

Posted on July 5, 2010 by dd

If you are an osCommerce user, please make sure to update your installation (and check your sites) as soon as possible. We have been tracking multiple compromises of osCommerce installations where the attackers added this javascript malware to the affected … Read more


Posted in hacked, malware, oscommerce | Tagged , , | 7 Comments
RSS Delicious