Forgot your password?
typodupeerror

+ - Thousands of compromised websites found by chance

Submitted by VincenzoRomano
VincenzoRomano (881055) writes "While doing an overhaul to a website of a customer of mine I've found a strange piece of HTML code in its homepage. Something containing code like this:

<a href="crk/index.php">crack,keygen</a>

So I have entered a part of this string into Google just to find that there are 15k+ webpages containing the same code.
By clicking on any result link I've found rogue websites providing cracks, key generators and other funny stuff that would make happy (and actually does) a lot of people.
It seems to me that the code has been inoculated in those web sites with that fancy transitional home page that after a few seconds changes to the real home page.
The website I was checking is not listed as it prevents Google from crawling into it, so I presume the problem can be larger than seen on Google.
I'm posting this on Slashdot as I presume that a lot of people with the same job as mine is reading these webpages quite often and my proposition is to rise this warning to as many security advisors as possible."

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Thousands of compromised websites found by chance

Comments Filter:

Brain fried -- Core dumped

Working...