Sygnoos has nothing on their blog or web site about this vulnerability. That’s irresponsible. Own up to it and let your users know how to fix it. That’s what blogs are for.
We put the latest update in 6 days ago and the redirect hit us today. Either there’s a way to make it persistent or they didn’t fix it.