As we dig into this blackhat SEO spam network, we are finding more and more sites hacked by them.
One of the sites we discovered is the http://israel-un.mfa.gov.il (Israeli permanent mission in the UN). It is probable they’ve been exploited due to using an old version of Joomla that has security vulnerabilities.
This is the results of our scan against it:
In fact, if you just view their source code you will find all the spam:
Why are these sites getting hacked?
Attackers are using those sites with a high page rank to increase their own rankings on search engines. So when users search for viagra or cialis, their own web sites will show up.
How did it got hacked?
Probably due to an old version of Joomla being used. This same server hosts other Israeli sites, like www.israelemb.org, www.isrealli.org, www.israelpolitik.org, etc, but it seems they didn’t get affected.
Need help?
Is your site hacked with malware or spam? Need help? Contact support@sucuri.net or visit us at http://sucuri.net
3 comments
I saw your tweet as I was just in the middle of contacting a well-known Christian magazine, because their website is hosting bh seo spam also–Guess what CMS they are using?
Joomla!.
-Josh
hello gooday now we whant p c in the world thank you
Comments are closed.