Site hacked tonight

[oeb]

The website was hacked tonight adding an iframe containing a link to virus on several pages including the forum. Thanks to Ian for reporting this. The virus appears to be gone from the link now, and the affected pages of the website is also restored. I will of course start investigating to find the vulnerability that allowed this attack to happen. In my 12 years of online presence this has never happened before.

[Ian]

Well done Oeb for getting rid of it.

It was pretty scary trying to come on and my Virus software going nuts.

[fish]

Had the same thing. Thanks for getting rid of it Oeb.

Probably associated but when I came on here a few minutes ago there were no new postings showing, including this one.
I posted something in the "Anything else" subject and all of a sudden all these other postings appeared.

Hopefully that's only temporary until all the nasty business is fully disposed of.

[Agnes&Elin Forever!]

Dirty Ole annihilated the scum

[Ian]

We're all dirty on here.

[Agnes&Elin Forever!]

No only you and Ole

[Agnes&Elin Forever!]

"I'm dirty, which results in annihilation!" (Ian & Ole)

[fish]

...and I'm just embarassed....again.



By the way Magnus, did you have any of the problems viewing posts which I seemed to have?
All seems fine now but until I posted something the other day I couldn't see anything new.

[oeb]

I have now located the weakness in the code that made the attack possible. It was not related to the phpbb forum code, but rather the code of the web site itself. The code is improved now. This appears to be a purely automated injection much like how spambots work, i.e. not an attack directed specifically at this site as such.

[Ian]

Well, I suppose that's good, anyway.