1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Warez Templates are full of viruses

Discussion in 'BlackHat Lounge' started by Claudiu, Jul 9, 2011.

  1. Claudiu

    Claudiu Regular Member

    Joined:
    Feb 28, 2009
    Messages:
    287
    Likes Received:
    81
    Location:
    127.0.0.1
    Just saw an email in my inbox coming from my webhost saying i have a phising thing on one of my websites.

    that's a website i haven't used at all, just dropped a template there to make some testing few months ago, and left it there as is.

    and i also got this other email from easy solutions notifying me my website is hosting phishing to a bank in south africa and i should take all the evidence a for a forensic analysis in case that the authorities ask for it.

    it's easy solutions that reported my website to my web host and also notified me of the issue.

    i'm kinda scared ... lol .. bank fraud from my website


    Lesson learned .. all my websites will be made from scratch. no more buyed templates and obviously no more warez
     
  2. zombi

    zombi Newbie

    Joined:
    Aug 30, 2010
    Messages:
    41
    Likes Received:
    2
    Location:
    127.0.0.1
    Home Page:
    which template? did you get it from BHW?
     
  3. raybes

    raybes Junior Member

    Joined:
    Jul 19, 2010
    Messages:
    120
    Likes Received:
    17
    Location:
    USA
    I usually use those plugins that are supposed to scan for these issues... not sure how accurate they are, though. If only I knew what to look for and there weren't so many files I would do it manually. Building every stie manually is a bit drastic, though.. the opportunity cost of labor will be greater than just paying for a membership to a good template site.
     
    Last edited: Aug 23, 2011
  4. softwareprogram

    softwareprogram Junior Member

    Joined:
    Jun 2, 2011
    Messages:
    154
    Likes Received:
    64
    Occupation:
    Business Owner
    Location:
    Hong Kong
    well it depends .. I got tired getting some wordpress sites getting hacked all the time .. I tho it might bcoz of the host .. you can never say .. wordpress is something great but it also has some downfalls
     
  5. Bross

    Bross Senior Member

    Joined:
    Feb 6, 2010
    Messages:
    859
    Likes Received:
    355
    The main problem is usually wordpress.

    Even though I believe it's the best thing to use for your website - It is also the most vulnerable.
    You can barely see hard coded sites hacked. If any.

    Wordpress is just easy to hack and many companies don't setup their scripts properly.
     
  6. EJIKK

    EJIKK Newbie

    Joined:
    Aug 2, 2011
    Messages:
    17
    Likes Received:
    0
    every time double-check your new free template for hidden iframes and external links. simple rule.
     
  7. EJIKK

    EJIKK Newbie

    Joined:
    Aug 2, 2011
    Messages:
    17
    Likes Received:
    0
    Not only WP. DLE is very popular too.
     
  8. ronegraT

    ronegraT Power Member

    Joined:
    Dec 29, 2010
    Messages:
    620
    Likes Received:
    101
    Occupation:
    sleeping
    Location:
    Sweden
    This is the big problem for users that dosen´t know bad or good php code, i myself got shutdown since my site got infected by malware.

    Bad code could be in any php file or script , so how could one protect his sites against this?
     
  9. Bross

    Bross Senior Member

    Joined:
    Feb 6, 2010
    Messages:
    859
    Likes Received:
    355
    If you are really crazy for security then the good old HTML is best.

    But nothing can match wordpress when considering all webmastering aspects.