Re: Help! Blogs.ntu.edu.sg was hacked.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Check the .htaccess files.

- --
Dimitar Ivanov
Security Consultant
Web: http://www.websecuritywatch.com/
E-mail: [email protected], [email protected]


On 12/17/2012 06:04 PM, Teo En Ming (Zhang Enming) wrote:
> Dear list,
> 
> Blogs.ntu.edu.sg was hacked recently. Please search the Yahoo! 
> search engine for blogs @ ntu. You will observe that the Yahoo! 
> search engine returns results displaying nike shoe advertisements. 
> If the user agent is a browser or Google Bot, and the referrer is 
> Google, traffic to blogs.ntu.edu.sg will be redirected to 
> http://www.newfreeshoes.com/
> 
> We have searched the wordpress directories and the mysql database 
> but found nothing. How can we trace what the hackers have done to 
> blogs.ntu.edu.sg?
> 
> Thank you very much.
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDQF1wACgkQiMNI9JfSVMHMPQCgl+HhKAg+f7F7iY1Qzm9f7uF3
n3QAoJKJZfvkoXvnpY00VxtuAbXob93j
=eP8d
-----END PGP SIGNATURE-----



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------