vbresults
07-10-2013, 10:00 PM
vBulletin is very unique on how it stores its templates and plugins, It?s different than WordPress and Joomla, all the content is saved in the database. That makes it a bit more complicated for webmasters because they can?t just use common command line tools (like grep) to search through all their files. They need to use phpMyAdmin or another database tool to try to find and fix those issues.
And that?s where this malware hides itself. It uses the Plugin system and hooks into ?global_start?, so it is called on every page request.
Read more... (http://blog.sucuri.net/2013/07/vbulletin-infections-from-adabeupdate.html)
What is this plugin?
This plugin allows you to export all plugin code in the database to a single file with one click. You can then scan the plugin text file for malware. This plugin will later expand into a full security audit suite.
https://vborg.vbsupport.ru/attachment.php?attachmentid=145717&stc=1&d=1373565590
Hackers can insert malicious code directly into the datastore, ignoring the actual plugin table and evading detection via scanning with the plugin manager. This plugin exports the live, running datastore rendering that tactic useless.
Installation
Import the product Xml.
The installation is complete; congratulations! Mark As Installed, Nominate For MOTM and Vote https://vborg.vbsupport.ru/external/2013/07/1.gif
And that?s where this malware hides itself. It uses the Plugin system and hooks into ?global_start?, so it is called on every page request.
Read more... (http://blog.sucuri.net/2013/07/vbulletin-infections-from-adabeupdate.html)
What is this plugin?
This plugin allows you to export all plugin code in the database to a single file with one click. You can then scan the plugin text file for malware. This plugin will later expand into a full security audit suite.
https://vborg.vbsupport.ru/attachment.php?attachmentid=145717&stc=1&d=1373565590
Hackers can insert malicious code directly into the datastore, ignoring the actual plugin table and evading detection via scanning with the plugin manager. This plugin exports the live, running datastore rendering that tactic useless.
Installation
Import the product Xml.
The installation is complete; congratulations! Mark As Installed, Nominate For MOTM and Vote https://vborg.vbsupport.ru/external/2013/07/1.gif