Following the Dreamhost hack, that was revealed this week, many websites hosted by the company have been hijacked to redirect users to a Russian scam page. I’ve identified hundreds of websites hosted by DreamHost that contained a PHP page redirecting to hxxp://www.otvetvam.com/. Here are a few examples: http://www.lciva.com/wp-content/plugins/extended-comment-options/gyrewnv.php http://honorboundphoto.net/photos/10007-mankato_habitat_for_humanity_golf_tournament/agtruje.php http://ryanmasters.ca/wp-content/gallery/our-kingdom/thumbs/tyiueg.php http://treatmentofpanicattacks.com/wp-content/cache/supercache/www.treatmentofpanicattacks.com/category/anxiety-support/polzin.php http://r4theband.co.uk/content/wp-content/themes/agregado/includes/cache/gyrewnv.php http://dedehaluk.com/cache/hakkinda/fgjke.php http://www.agustindondo.co.uk/yellowbrick/wp-content/files_flutter/modules/fgjke.php http://dcstavclub.org/wp-content/themes/newzen_2.0_build_105/images/fgndnju.php […]
Latest Comments