Results 1 to 2 of 2

Thread: WP akismet user : watch out, big secrurity breach ....

  1. #1
    SonnyCooL's Avatar
    SonnyCooL is offline HeeHa
    Join Date
    Jan 2010
    Location
    Melb/Malaysia
    Posts
    920
    Thanks
    250
    Thanked 92 Times in 78 Posts

    WP akismet user : watch out, big secrurity breach ....

    from my webhosting and antifraude.net reply :
    We run some checking and would like to update you on the reason of the injected script.

    196.29.210.100 - - [21/Oct/2012:00:53:06 +0800] "GET //wp-content/themes/Webly/cache/s.php?x=img&img=ext_css HTTP/1.1" 200 570 "http://propertyagent.my//wp-content/...kismet&sort=0a" "Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20100101 Firefox/14.0.1"

    As you can see, akismet plugins were injected and make changes through the page:
    http://propertyagent.my//wp-content/...ly/cache/s.php

    s.php is the backdoor script that used by the attacker to upload the malicious script.
    Its recommended to change your used theme on your page, as obviously there is vulnerables on the theme 'Webly' you using.
    and i make some simple search on google, the problem exit since jun but akismet don't take it serious, now it hit me ....... lucky found out fast enough ...

  2. #2
    TopDogger's Avatar
    TopDogger is online now Über Hund
    Join Date
    Jan 2009
    Location
    Hellfire, AZ
    Posts
    2,947
    Thanks
    341
    Thanked 884 Times in 672 Posts
    Last week we experienced a comment spam attack from China. I found out that when that happens, Akismet temporarily suspends their API key and stops working. Over 3500 spam comments stacked up in the Pending queue before we blocked a large range of IP addresses from China. Fortunately, Akismet does capture the IP address of the comment submitter, so was easy to identify the IPs of the attackers with a simple MySQL query.

    The bad part was that Akismet stopped working an all sites that use that API key, so we had spam comments stacking up on multiple sites.
    "Democracy is two wolves and a lamb voting on what to have for lunch. Liberty is a well-armed lamb contesting the vote." -- Benjamin Franklin


Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •