The Support Forums will be in read-only mode for a scheduled maintenance window on 01 September 2016 14:00 UTC - 20:00 UTC. More information.

Think my blog has been hacked (6 posts)

  1. carbonneutraltourism
    Posted 7 years ago #


    I think my blog http://www.carbonneutraltourism.co.uk has been hacked. I am not very ‘tech savvy’. To check if I’ve got a problem I signed up Google alerts using the key alert terms: viagra OR cialis OR levitra OR Phentermine OR Xanax site:carbonneutraltourism.co.uk.

    Recently I got the following alert response: Carbon Neutral Tourism | Richard Linington (http://www.carbonneutraltourism.co.uk/author/admin/)
    buy cialisbuy cialisBuy Cialisbuy cialisbuy accutanebuy acompliabuy cialisbuy levitrabuy viagrabuy cialis onlinebuy viagra onlinebuy levitrabuy acompliabuy ...

    When I visited the page I couldn’t find these words (I used view page source) but still couldn’t find them.

    Any thoughts about sorting this out?

    Thanks for your time and help.

    Kind regards,


  2. whooami
    Posted 7 years ago #

    a cpl things, without even looking at your live site.. Here is a google cached page:

    view the source of that page, and search for cialis, and you'll see this:

    <b style='position:absolute; overflow:hidden; height:0; width:0;'><a href="http://www.nola.com/forums/profile.ssf?nickname=alson">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://www.nola.com/forums/profile.ssf?nickname=cialisbuy">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://www.nola.com/forums/profile.ssf?nickname=levitrabuy">buy levitra</a><a href="http://www.nola.com/forums/profile.ssf?nickname=orderlevitra">buy levitra</a><a href="http://www.nola.com/forums/profile.ssf?nickname=buypropecia">buy propecia</a><a href="http://www.nola.com/forums/profile.ssf?nickname=propeciaa">buy propecia</a><a href="http://www.nola.com/forums/profile.ssf?nickname=somabuy">buy soma</a><a href="http://www.epinions.com/user-somabuy/show_~View_Profile">buy soma</a><a href="http://www.epinions.com/user-levitra-cheap/show_~View_Profile">buy levitra</a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4423&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4424&course=1">buy propecia</a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4425&course=1">buy levitra</a><a href="http://aulavirtual.unc.edu.ar/moodleffyh/moodle_ffyh.org/user/view.php?id=4426&course=1">buy soma</a><a href="http://www.drama-education.com/site/user/view.php?id=5747&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://www.drama-education.com/site/user/view.php?id=5748&course=1">buy propecia</a><a href="http://www.drama-education.com/site/user/view.php?id=5749&course=1">buy levitra</a><a href="http://www.drama-education.com/site/user/view.php?id=5750&course=1">buy soma</a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=770&course=1">buy <b style="color:black;background-color:#a0ffff">cialis</b></a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=771&course=1">buy levitra</a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=772&course=1">buy propecia</a><a href="http://moodle-eduhi.bmbwk.gv.at/brg_reutte/user/view.php?id=773&course=1">buy soma</a></b> <!-- 9a3aab10ee58e6350b8ab5621e26886d --></p>

    that's hacked.

    Now, your current theme is different than whats in the cached page, and looking at the source of whats live, youre theme isnt showing symptoms of being hacked.

    Thats not to say that your site isnt compromised right now, it may very be. It was at one point, after all.

  3. carbonneutraltourism
    Posted 7 years ago #

    Hi Whooami,

    Many thanks for your help. I've visited the page and removed the hacked code next to the photo itself.

    Hopefully, that will sort the problem out. I was wondering how should I check if the site has been hacked again?

    All the best,


  4. GoBecky
    Posted 7 years ago #

    How does a blog get hacked like this in the first place?

  5. whooami
    Posted 7 years ago #

    Hopefully, that will sort the problem out.

    it wont. youve removed the symptom, not the cause.

  6. carbonneutraltourism
    Posted 7 years ago #


    I was wondering how could I remove the cause of the problem?

    Many thanks


Topic Closed

This topic has been closed to new replies.

About this Topic