VideoWhisper Site Hacked, Users Advised to Visit Using Internet Explorer

FOR IMMEDIATE RELEASE
(Free-Press-Release.com) August 15, 2009 -- On 15 August 2009 VideoWhisper com staff discovered that the main site has been hacked and also blacklisted by Google, Firefox, Chrome.

Attacker inserted malicious html content that loaded pages from his site using invisible iframes probably to generate fake traffic. All index.php, .htm, .html files were corrupted by adding html code with invisible iframes at their end.

Our developers built a script that found and removed all malicious content.
Now Dasient com shows for the VideoWhisper site 0 infected pages of all 33 pages quick scanned.

The cleanup script scans all site files for certain strings and code and can also remove certain code. We'll probably release it to the public domain when this is cleared up and have time to write some small docs for it.

Looks like the source of the problems came from a htmlarea component. Attacker managed to upload a .jpg.php file and various exploits from there. We removed it completely.

Our site was also blacklisted today by google / firefox / chrome. We already posted a review request as we found and fixed the problems fast.

We removed vulnerability, fixed content, changed passwords, requested safety review from google.

Until google review the site will not be accessible by Firefox and Chrome. We advise all users to access site directly by entering domain in Internet Explorer.

exploit     firefox     Fixed     google     hacked     internet     security     site     videowhisper     vulnerability     web