chiffandfipple.com hacked

It appears that several of my websites, including chiffandfipple.com, have been hacked and contain a trojan horse. I’m about to take c&f offline for the time being.

So far as I can tell, the forum is not infected.

Could that include http://chiffandfipple.ning.com as well?

No. That’s totally separate.

If so, then perhaps this could be a good time to put out an APB, All Points Bulletin, about The Ning.

That is, if C&F goes into shutdown, then perhaps there could be an alternative.

:wink:

Any idea what the Trojan Horse does in this case Dale? I actually visited the main site early in the day yesterday.

Thx,

Loren

I have noticed that accessing C&F from somebody else’s PC has been difficult. I used to be able to type in Chiff and Fipple Forum Index and Google would bring me to the link. Lately, it won’t and every link I do click sends up a red flag warning me of nasty insecure things.

what explains why we were not turning up on Google

Well, I don’t really know what to do about it. All of this is hitting at a point when I have no time to deal with it. More than once person warned me that I needed to move all the stuff to a more service-oriented hosting company, but I didn’t.

I have to focus on getting righthandpointing.com back up and, for the time being, I’m probably going to host it elsewhere.

The forum long since outgrew my ability to manage the technical side and with Rich’s departure, I’m pretty much lost. MTGuru is a big help, but I don’t think he’s an expert on all of this either.

I just got an email from Dreamhost with a bit more helpful information, but it’s still going to take a long time for me to sort it all out.

Take care of your priorities first Dale. It seems we can still log on to this board for the time being, so I do not see any urgency it dealing with it as of yet.

I just received an e-mail from another chiff member however it has been sent from another company using my friends e-mail address. I’m wondering now if the address book has been stolen? It comes from a site called Vanigo.com

I’ve had problems too.

you are showing your email address at the bottom of your posts, anyone/bot can capture it.

I tried to log on C & F yesterday, but every time I tried, my computer froze up. I had to do a control alt delete to back out. There was a screen from Norton security saying that there was an attempt to infect my computer, which, luckily, my security software was able to take care of each time. There were several security updates that came through the day before in the daytime, when my usual automatic security updates are in the early morning. The trojan horse or whatever was identified by name, but I didn’t write it down. I read yesterday that there are growing instances of these types of malware attacks, and that an estimated one in ten computers in the USA (I believe) are presently affected, with sensitive personal data available to the hackers. The whole internet insecurity mess scares me.

Well, this makes me think that board is infected, frankly. I wonder if I need to disable it for the time being. I hate to do it. I suspect it would be no sooner than 2 weeks before I can get it fixed.

I’ve hit the forums from multiple systems (one running Avast, one running Symantec’s corporate antivirus system and firewall).

So far I’ve not seen any evidence that the forums are infected.

–James

Thank you, James. Most appreciated.

Nothing wrong from here, either; I’m logging in via Opera from a box running XP.

It’s willful ignorance, don’t you know. :wink:

as long as it’s willful you’ll just take longer ta figure it out :smiley: