28,000+ Websites spammed with hidden links??? WARNING

Discussion in 'General Chat' started by robscott, May 9, 2008.

  1. #1
    I discovered this morning that our site's index page has had a lot of hidden links inserted into the index page, which Google has discovered, and which have seriously impacted our search enginge rankings and ability to pass PageRanke to other sites.

    Upon closer inspection, I have still failed to discover the root cause of this attack.

    However, the spam has the following unique string in it - dfgsdfgfr@r45t - check out the source code every site that comes up on google for that search (at the bottom you'll find the spam).

    This is a crazy amount of sites all affected by the same method. I'd like to hear from others who've had the same so that we might work out how to prevent a recurrence.

    I wrote about this in my blog here - http://www.24hourtrading.co.uk/blog/holy-spam-surge-webmasters-beware-dfgsdfgfrr45t-743/ - you can leave a comment there, or here, or IM me. It doesn't bother me if you visit my blog or not - I'd really like to contact all of the webmasters who've got this on their site and haven't realised yet. It sucks. Its cost us countless hours already, and it WILL cost us a lot of money to fix. Check you're site for the above string - dfgsdfgfr@r45t - it can't hurt to find out you haven't got it. and you definitely want to know if you have!

    Plus it makes me look even more stupid than I am :eek:

    Spread the word. Any help appreciated.
     
    robscott, May 9, 2008 IP
  2. Loonm

    Loonm Peon

    Messages:
    744
    Likes Received:
    23
    Best Answers:
    0
    Trophy Points:
    0
    #2
    man this is sick you are spammer, with xrumer? ;)
     
    Loonm, May 9, 2008 IP
    kiviniar likes this.
  3. robscott

    robscott Peon

    Messages:
    5
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    what's xrumer?
     
    robscott, May 9, 2008 IP
  4. make-it-yourself.me.uk

    make-it-yourself.me.uk Active Member

    Messages:
    310
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    60
    #4
    some one tryed to submit a video with that in it to my web site,

    except i have to approve the viideo so i deleted it maybe better luck next time
     
    make-it-yourself.me.uk, May 9, 2008 IP
  5. chtdatweb

    chtdatweb Well-Known Member

    Messages:
    1,473
    Likes Received:
    23
    Best Answers:
    0
    Trophy Points:
    160
    #5
    Would you care to elaborate a little more?
     
    chtdatweb, May 9, 2008 IP
  6. RichardPG

    RichardPG Active Member

    Messages:
    109
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    53
    #6
    Have you contacted your host/locked down your box? Looking at some of the effected sites, it seems that they are just regular pages which have been compromised rather then post submissions or anything.

    It's clever however it's done and does raise an issue I've long wondered which is how google treats stylesheets and the display:hidden (or any other workaround) feature. I can imagine it's quite hard to detect if hidden away (no pun intended!)
     
    RichardPG, May 9, 2008 IP
  7. mtime88

    mtime88 Peon

    Messages:
    690
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Xrumer is a spam program that post to blogs and forums while bypassing a captcha
     
    mtime88, May 12, 2008 IP