Blog entries posted in: Search Engine Marketing

Malware Infection Breaking WordPress Websites

There is a known malware infection caused by a serious vulnerability in the MailPoet WordPress plugin. This malicious attack attempts to slyly inject Spam into the hacked site, which is causing websites to break, and focuses predominantly on WordPress sites with outdated plugins or weak admin passwords.

What It Looks Like
The infected PHP code is very buggy and is corrupting legitimate website files, as well as themes and plugin files, which causes PHP errors to be displayed instead of website content:

Parse error: syntax error, unexpected ‘)’ in /home/user/public_html/site/wp-config.php on line 91

After removing the infecting malware, the only way to remedy the issues is to restore the corrupted files from a backup. This is what the malware code looks like:

< ?php $pblquldqei = ’5c%x7824-%x5c%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%xq%x5c%x7825%x5?c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q7825)3?of:opjudovg< ~%x5c%x7824!%x5c%x782421787825!|!*!***b%x5c%x7825)…

If you are running MailPoet, we recommend upgrading it to the latest version. If you do not have a firewall on your … Read the rest

Announcement: DDoS Attack in Detroit 7/10/2014

We are currently experiencing a DDoS attack on our Detroit facility.

This attack is part of a larger-scale attack that is affecting multiple internet routing points. More details can be seen here:

http://www.akamai.com/html/technology/dataviz1.html (click on ‘Attacks’)

We are continuing to work hard to remedy the situation with our Network and System Administrators.

Please stand by for additional information.

We’ll update you as we know more!

 … Read the rest

.uk Domains Available For $15 A Year!

slider-alien-5

We are excited to announce that starting June 10th 2014 you can register .uk domains for just $15 a year!

Here’s what you need to know about the registration process:

  • If you have a unique .co.uk, .org.uk, or other similar domain, the equivalent .uk domain will be automatically reserved for you until June 10, 2019, as long as the domain remains registered.
  • You can check a registrant’s rights with this handy lookup tool: http://www.dotuklaunch.co.uk/rights-lookup-tool.
  • If you want to register a 2nd level .uk domain, such as ‘example.uk’, then the contact info for that domain must be an exact match to the existing equivalent third level .uk domain, like ‘example.co.uk’ or ‘example.org.uk’. If the information is not the same the registration will fail.
  • If there is no equivalent domain with rights already existing within the .uk domain family, by registering
  • Read the rest

Patched: OpenSSL Heartbleed Vulnerability CVE-2014-0160

heartbleedThis morning we deployed an update to the OpenSSL software packages on our shared and customer servers to address a critical vulnerability. The vulnerability, dubbed “heartbleed”, is the result of improper data validation (bounds check) within a “heartbeat” feature of the OpenSSL TLS implementation.

Because of this vulnerability, it is possible that a portion of active memory can be disclosed to connecting clients, which can leak sensitive information. Ultimately, this may lead to the disclosure of transaction or customer-identifiable information, which undermines the very purpose of SSL implementations for our customers and the Internet community at large.

Although we make every effort to schedule updates and maintenance, the critical nature of this vulnerability prompted immediate action. We’re working hard to protect our customers and want to thank you for your understanding.

What is the status of my SSL certificates?
Our position is that regenerating/reissuing SSL certificates is not … Read the rest