I don't know who this "globalpoweringgathering" hacker is, but burn in hell, scumbag(s)...

I have two Websites that got hacked. My Web Host has a big, big bullseye painted on their backs right now (DreamHost)...here's what they wrote on their support blog yesterday afternoon:



So what happened? Without knowing for sure, it looks like I had an older installation of WordPress that was exploited by the hacker on two of my sites. They injected a line of script in my HTML pages, and also some malicious code in my PHP files. This means people accessing my site who are running antivirus / anti-malware software are getting legitimate red alerts about attempts to install drive-by malicious programs, and I'm getting blacklisted on Google until I fix it.

I've since changed my FTP password, but I also have to do cleanup and re-submit both sites to Google so that I am no longer on the "Malware Blacklist."

On one site, via Web FTP, I had to open about 30 pages and remove the lines of code they injected. I ran the scanner again and it came up clean.

The other site? About 250 pages, one page at a time. I have about a dozen pages left.

I may end up having to move the sites I have on DreamHost...about 25...because unless they can get that bullseye off their back, this shit is going to keep on happening. I have all of my programs like WordPress sett to auto-update from here on, so maybe that will solve it. Maybe not.

Don't grow up to be Webmasters, kids, unless you love it (I do, that's why I chose it).

:-)

I have not been able to play COD with my friends for like 10 days because of them. FUCK HACKERS!!

if you were maintaining your own WP files you can hardly blame the host if your files were insecure. You have to do your own maintenance on WP, and they do provide a very simple method for most WP users to do so.

...but this was one of those out of sight, out of mind things, and it bit me, so yeah...I could have taken a simple step to prevent it.

But now I have, and my bigger concern is that if the host is addressing the bigger issue of their being in the crosshairs, great. If it gets too difficult for these assholes to pick off targets, they'll go somewhere else. That except I posted from the DreamHost support blog had nothing to do with me or WordPress on my site. They found themselves on the receiving end of an attack bigger than any they'd experienced before.

I've been happy with their hosting, but I've been lucky compared to you.

What a nasty experience!

'virus alerts' from what claimed to be Google, telling me they had scanned my computer and it had dozens of dangerous viruses and I should download, (and pay for) the 'fix'. I kept deleting the messages but they are hard to get off your screen. I finally shut down the computer and when I started it up, everything was fine.

I think it began when I went to a website, forget which one to look something up.

Anyhow, since I've had no more problems, I assumed it was just a nasty marketing trick to get people's credit card info.

Go to the following website and read about what you can do. It's a completely free site dedicated to killing those bastards that like to attack us. The following is from the site and could be a possible offender.

http://www.bleepingcomputer.com/virus-removal

I will definitely check out the site. It seems to be gone, but just in case I'd like to know what to do if it comes back.

Appreciate the link very much ~