I know this is off topic but I wanted to get the most exposure…
Sometime early today several of my websites were hacked, including but not limited to exoray.com… Some rouge code was injected into the html pages exploiting an unauthorized install of malware for people visiting the site with IE…
I HAVE cleaned the files within about an hour of it happening but now I’m trying to narrow down how they got in… I’m not the only person affected as I have found a few forums with the same exploit and as of now I can’t find any legit info on how the hack was carried out… Meaning I don’t know if my computer was compromised, there was a brute force attack or if the hosting company was compromised…
Google has my site blocked as a “reported attack” site right now and I have submitted for them to recheck the site and confirm it’s clean now and thus remove the block,can’t say how long that will take though but I hope very shortly they confirm it’s clean… So if you get a warning or what not from clicking one of my links or whatever at this time the site is CLEAN and the password has been changed from a different computer then the main system so it should stay clean while I track down the exploit…
Anyway the bad news is websites are my business, it’s my income and job and the timing can’t be worse right now there will be a 24 hour or 48 hour delay on answering emails/PMs and shipping the shells an parts out while I devote all my time to seeing where the hole happened… I highly suspect the hole is on the hosting companies end at this time as do many other people experiencing the issue… I’m in the process of dumping this hosting company so this might expedite that…
Anyway unless you visited my sites main index page early this morning there should be no worries as I said I caught this early and cleaned the rouge script that was injected…
