prevedvsem123.cn = hacked!

Written by: The Tutor on Monday, October 20th, 2008
Posted to: Security
3 comments, add yours!

Another server of mine was hacked to serve an iframe of content from prevedvsem123.cn. I’m posting simply to help others figure out what might be happening to them since this seems to be a new exploit.

I could survive the iframe, but these guys injected bad code into all my php sites all of which are dead now due to syntax errors… many with no backups :(

So, it seems that in addition to the iframe code the prevedvsem123.cn guys are either malicious just for fun, or they just can’t code well :)

I’d post more detail but Stephan Miller has already put together the most complete resource on the prevedvsem123.cn iframe exploit. You should start there if you think you’ve been hacked.

Don't miss another post! Subscribe by RSS feed or by email today!

Share this post!   3 comments, add yours!

Related posts

3 Responses to “prevedvsem123.cn = hacked!”

  1. # Priyanon 21 Oct 2008 at 5:45 am

    Oh it happened for you also.. Few months back i lost about 5 of My Blogs with this hack with no Backup :(

  2. # Stephan Milleron 21 Oct 2008 at 7:34 am

    Thanks for the link. I think today was the day when it hit pretty big. The Google results for prevedvsem123.cn just went through the roof, when yesterday there were only about 5 domains.

  3. # The Tutoron 21 Oct 2008 at 9:21 am

    stephan, yes I noticed that. the night it hit me I checked Google and there was only one result! that’s why I posted too, more coverage so people can find some help, which right now is your post :)