WARNING! Used to distribute malware

Viewing 2 replies - 1 through 2 (of 2 total)

  • I’ve just looked through the plugin to try and find the snippet you referenced, but it doesn’t exist anywhere in the plugin.

    Are you sure it didn’t come from another plugin?

    Thread Starter MrJdotnet

    (@mrjdotnet)

    <script src="//socialstatsplugin.com/jqury.js"></script>

    That is the file that serves the malware. It is clearly from this plugin because if you go to that domain and take a look the website links back to this plugin’s page for download.

    I agree though that I cannot see how that file gets included with the module based on the code in the WP repository. I was going by the earlier report of users having that file included on their pages. Perhaps it includes it at run time somehow or perhaps an older version of the module was doing it.

    Google “socialstatsplugin.com/jqury.js” and look at the loads of posts about it. Better to remove this plugin altogether.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘WARNING! Used to distribute malware’ is closed to new replies.