• carbonneutraltourism

    (@carbonneutraltourism)


    Hello,

    I think my blog https://www.carbonneutraltourism.co.uk has been hacked. I am not very ‘tech savvy’. To check if I’ve got a problem I signed up Google alerts using the key alert terms: viagra OR cialis OR levitra OR Phentermine OR Xanax site:carbonneutraltourism.co.uk.

    Recently I got the following alert response: Carbon Neutral Tourism | Richard Linington (https://www.carbonneutraltourism.co.uk/author/admin/)
    buy cialisbuy cialisBuy Cialisbuy cialisbuy accutanebuy acompliabuy cialisbuy levitrabuy viagrabuy cialis onlinebuy viagra onlinebuy levitrabuy acompliabuy …

    When I visited the page I couldn’t find these words (I used view page source) but still couldn’t find them.

    Any thoughts about sorting this out?

    Thanks for your time and help.

    Kind regards,

    Richard

Viewing 5 replies - 1 through 5 (of 5 total)
  • whooami

    (@whooami)

    a cpl things, without even looking at your live site.. Here is a google cached page:

    https://74.125.95.104/search?q=cache:38Gago1vFrwJ:www.carbonneutraltourism.co.uk/2008/07/+carbonneutraltourism.co.uk+cialis&hl=en&ct=clnk&cd=4&gl=us

    view the source of that page, and search for cialis, and you’ll see this:

    <b style='position:absolute; overflow:hidden; height:0; width:0;'><a href="https://www.nola.com/forums/profile.ssf?nickname=alson">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="https://www.nola.com/forums/profile.ssf?nickname=cialisbuy">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="https://www.nola.com/forums/profile.ssf?nickname=levitrabuy">buy levitra</a><a href="https://www.nola.com/forums/profile.ssf?nickname=orderlevitra">buy levitra</a><a href="https://www.nola.com/forums/profile.ssf?nickname=buypropecia">buy propecia</a><a href="https://www.nola.com/forums/profile.ssf?nickname=propeciaa">buy propecia</a><a href="https://www.nola.com/forums/profile.ssf?nickname=somabuy">buy soma</a><a href="https://www.epinions.com/user-somabuy/show_~View_Profile">buy soma</a><a href="https://www.epinions.com/user-levitra-cheap/show_~View_Profile">buy levitra</a><a href="https://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4423&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="https://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4424&course=1">buy propecia</a><a href="https://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4425&course=1">buy levitra</a><a href="https://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4426&course=1">buy soma</a><a href="https://www.drama-education.com/site/user/view.php?id=5747&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="https://www.drama-education.com/site/user/view.php?id=5748&course=1">buy propecia</a><a href="https://www.drama-education.com/site/user/view.php?id=5749&course=1">buy levitra</a><a href="https://www.drama-education.com/site/user/view.php?id=5750&course=1">buy soma</a><a href="https://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=770&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="https://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=771&course=1">buy levitra</a><a href="https://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=772&course=1">buy propecia</a><a href="https://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=773&course=1">buy soma</a></b> <!-- 9a3aab10ee58e6350b8ab5621e26886d --></p>
    </div>

    that’s hacked.

    Now, your current theme is different than whats in the cached page, and looking at the source of whats live, youre theme isnt showing symptoms of being hacked.

    Thats not to say that your site isnt compromised right now, it may very be. It was at one point, after all.

    Thread Starter carbonneutraltourism

    (@carbonneutraltourism)

    Hi Whooami,

    Many thanks for your help. I’ve visited the page and removed the hacked code next to the photo itself.

    Hopefully, that will sort the problem out. I was wondering how should I check if the site has been hacked again?

    All the best,

    Rich

    gobecky

    (@gobecky)

    How does a blog get hacked like this in the first place?

    whooami

    (@whooami)

    Hopefully, that will sort the problem out.

    it wont. youve removed the symptom, not the cause.

    Thread Starter carbonneutraltourism

    (@carbonneutraltourism)

    Hi,

    I was wondering how could I remove the cause of the problem?

    Many thanks

    Rich

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Think my blog has been hacked’ is closed to new replies.