Wordpress Blogs hacked - but only if referred from Google

Alex Popescu just twittered about a serious Wordpress hack (although he was not the first). Apparently somebody hacked his Wordpress Blog to redirect readers, who reach it via a Google search, to your-needs.info. Luckily my blog has not been hit (yet?!):

andreas@andreas-desktop:~$ sudo curl -I http://blog.karroum.dyndns.org

HTTP/1.1 200 OK

Date: Sun, 01 Jun 2008 21:09:33 GMT

Server: Apache

X-Powered-By: PHP/5.2.5

X-Pingback: http://blog.karroum.dyndns.org/xmlrpc.php

Content-Type: text/html; charset=UTF-8andreas@andreas-desktop:~$ sudo curl -I -H "http://www.google.de/search?q=andreas+ebbert-karroum" http://blog.karroum.dyndns.org

HTTP/1.1 200 OK

Date: Sun, 01 Jun 2008 21:10:06 GMT

Server: Apache

X-Powered-By: PHP/5.2.5

X-Pingback: http://blog.karroum.dyndns.org/xmlrpc.php

Content-Type: text/html; charset=UTF-8

If your Blog is infected, look at the forum thread at wordpress.org for details how to fix it.

Tags:

Leave a Reply