Strange code

Post Reply
User avatar
LRAM
Master Bludit
Posts: 133
Joined: Sat Sep 24, 2016 4:02 pm
Location: France
Contact:

Fri Jun 26, 2020 5:27 pm

Hi

When in source mode I saw this code on some of my pages

4 times on the same page

Code: Select all

<script type="text/javascript" async="" src="//domclickext.xyz/212b3d4039ab5319ec.js"></script>
Is that part of Bludit ?
User avatar
LRAM
Master Bludit
Posts: 133
Joined: Sat Sep 24, 2016 4:02 pm
Location: France
Contact:

Fri Jun 26, 2020 5:30 pm

and this one on another one

Code: Select all

<script type="text/javascript" async="" src="//linkojager.org/212b3d4039ab5319ec.js"></script>
User avatar
Edi
Site Admin
Posts: 1927
Joined: Sun Aug 09, 2015 5:01 pm
Location: Zurich
Contact:

Fri Jun 26, 2020 5:47 pm

No, this is no Bludit code.

Seems that the sites are hacked.

Perhaps there is some information in the server logs.
Planet Bludit, Tipps, Snippets und nützliche Links. - Newsletter, Informationen zu Bludit (auf Deutsch).
User avatar
abdulhalim
Master Bludit
Posts: 108
Joined: Thu Mar 10, 2016 6:25 pm

Sat Jun 27, 2020 11:23 am

You have to scan your website and remove all the unwanted JS links.

https://sitecheck.sucuri.net/results/ht ... and-me.com

Your website is infected by malware...

Also, you need to replace all Bludit files with the new and clean version.
User avatar
Edi
Site Admin
Posts: 1927
Joined: Sun Aug 09, 2015 5:01 pm
Location: Zurich
Contact:

Sat Jun 27, 2020 1:38 pm

Could be that your PC is infected, and your password can be used.
Planet Bludit, Tipps, Snippets und nützliche Links. - Newsletter, Informationen zu Bludit (auf Deutsch).
User avatar
diego
Site Admin
Posts: 738
Joined: Sat May 16, 2015 2:53 pm
Contact:

Sat Jun 27, 2020 2:36 pm

Hi,
it's a pitty this happens.

There are a few people trying to hack Bludit, but I never saw a vulnerability from outside of the system, also if there is one for sure they will hack a lot of Bludit installations, so the point from malware from your computer could be.

Do you have access to the server via SSH or something like that ? to search in all the pages for javascript and remove it.
User avatar
diego
Site Admin
Posts: 738
Joined: Sat May 16, 2015 2:53 pm
Contact:

Sat Jun 27, 2020 2:39 pm

I found information about this malware.

https://malwaretips.com/blogs/remove-domclickext-xyz/

You can check on Google also.
User avatar
LRAM
Master Bludit
Posts: 133
Joined: Sat Sep 24, 2016 4:02 pm
Location: France
Contact:

Wed Jul 01, 2020 8:46 am

Hi
Well it's seems some Chrome Extention add this vulnerabilty
I think I've clean everything now
thanks
User avatar
Edi
Site Admin
Posts: 1927
Joined: Sun Aug 09, 2015 5:01 pm
Location: Zurich
Contact:

Wed Jul 01, 2020 10:41 am

Which extension is it?
Planet Bludit, Tipps, Snippets und nützliche Links. - Newsletter, Informationen zu Bludit (auf Deutsch).
Post Reply