How is it possible?

Artashes · Post #1 (**permalink**) 03-28-2007, 02:51 PM

Just out of the blue (not our Blue), one of my websites started to redirect to another site (which is clearly a domain revenue landing page)..

www.mindmagazine.com

A friend of mine ran a view > source on the initlal web site and the attached was configured in the html markup. It appears someone has inserted an iframe src that links to the www.blackh.info website (see attachment).

Admin Email: cvx-conts@gmx.net
Admin Name: Rubalier
Country: GQ (Germany)
City: Malabo
Domain ID: D16337509-LRMS
Created on: 01 February 2007
Expires on: 02 February 2008

Question is - how on Earth is it possible that a static website under good control can be compromised this way?

webfreak08 · Post #2 (**permalink**) 03-28-2007, 03:48 PM

It looks like this has happened to several websites and is reported to be a virus. I'd contact Micfo right away and see what they can do to remove it.

I saw reports that it may install a trojan on your computer. I'd run an anti-virus scan after visiting that site.

Artashes · Post #3 (**permalink**) 03-28-2007, 03:53 PM

Did not recognize it was that serious... Now let me scan myself...

rider · Post #4 (**permalink**) 03-29-2007, 04:43 AM

Why d you think it is not serious? I think that I scan myself to make sure.

MisterV · Post #5 (**permalink**) 03-29-2007, 08:06 AM

I guess it is quite serious.

Artashes · Post #6 (**permalink**) 03-29-2007, 05:31 PM

No viruses came up from the scan. While I have already fixed the issue - how is it even possible to compromise a static website like that?

bandboy · Post #7 (**permalink**) 03-30-2007, 10:49 PM

This is interesting. If i remember correctly this isn't the first time and wouldn't be the last time that static sites are compromised this way.

It has been done in past. How? I don't know but my friend lost many visitors over three days when it happened to his sites.

I'd be interested in knowing how could this be done.

Mabus · Post #8 (**permalink**) 04-01-2007, 06:26 PM

Are you hosting the site yourself or do you have a company hosting it for you?

Artashes · Post #9 (**permalink**) 04-01-2007, 06:40 PM

Peter, I will be the last person to try and host things myself.

Mabus · Post #10 (**permalink**) 04-01-2007, 06:58 PM

It could be a lot of different things then. The code could be insecure. It could be a security glitch with the host that was not properly addressed. Not quite sure. You would need to be able to see the logs around that point in time to see if it were a security glitch and check for someone editing the files in question.