Warning! Spam hack - virustotal undetected!

jessica7689

Registered Member
Joined
Nov 26, 2012
Messages
64
Reaction score
544
For those who are not aware..

Please Be Careful When Downloading Wordpress Themes from Nulled Sites.

There is a malicious code that is undetectable by virustotal. It hacks your meta/keyword description.

The code for this hack is hidden in an "image" file typically a .png or .jpg located in wp theme folder. Most common experiences (images/social.png). You can verify this using a text editor.

Please kill this image immediately. You can also navigate to your functions.php file and remove malicious code
(<?php include('images/social.png'); ?>)

This sneaky little bastard can be found on files from popular sites like nulledphp, theme123.net, etc.

:)
 
Last edited:
Good looking out and thanks for the warning
 
Can Wordpress security plugins like Wordfence prevent these malicious code injections?
 
I never did that before, but I tried what you said and didn't find anything. I'm clean I guess.. :)
 
thanks Jess, Null themes are bad idea, there are a ton of other ways to hide those little nipper scripts.
 
Is there such thing as clean and nulled file?
 
I always paid for my themes because I always felt that the person uploading the cracked theme would be able to hack your wp.
 
Back
Top