malware issue

yup…. there is a snippet of that on there too. since its inception, i have been following the site. I am security consultant, and I met these guys at a conference.

None of the snippets even execute. Therefore there is no threat.

What happened to tburdeinei’s post?

tburdeinei wrote:

I just verified j0hnnyb0ys statement by wget and reading the code. It is the exploit code, but not active- wrapped in code blocks so you can see an actual example of what you are looking for. your (and my) antivirus/malware software isn’t smart enough to tell that its not going to be parsed and run by the browser.

What happened to tburdeinei’s post?

There is a lag. Same thing happened with his first post. Give it some time.

kmessinger have you seen any infections like this out in the wild?

This last week I came across 19 individual infections and 2 server wide infections. In regards to the server infections, one of those malicious plugins actually created a cron job that was copying the malware to every index.php, index.html, default.html, and main.html file in the webroot.

Just wondering how many people have been dealing with this one in particular…

kmessinger have you seen any infections like this out in the wild?

It seems more and more troubles are showing up here but I haven’t hit any in my daily use of the web. I’m just an average user.

Just to help out… this is the link to the removal guide instead of the page with the malware snippets. Don’t want to go through that confusion again :X

https://www.malfarmed.com/blog/step-by-step-wordpress-malware-removal/