MLO site was compromised yesterday. Fixed.

2 views
Skip to first unread message

Andrey Tkachuk (MLO)

unread,
Jul 26, 2008, 3:26:41 AM7/26/08
to MyLifeOrganized
This is to inform that MLO site was attacked yesterday. Links to
malicious software have been integrated to all htm files. We have
discovered this incident in a few hours after the attack.

The site has been restored and it is working normally now.

I STRONGLY RECOMMEND CHECKING YOUR COMPUTER FOR MALICIOUS SOFTWARE IF
YOU VISITED WWW.MYLIFEORGANIZED.NET SITE IN PERIOD FROM 7/24/08 TO
7/25/08

The site is still listed as untrusted by Google until they review my
request to verify the site.



More details from Google Safe Browsing Diagnostic page:
http://www.google.com/safebrowsing/diagnostic?site=http://mylifeorganized.net

What is the current listing status for www.mylifeorganized.net/?

Site is listed as suspicious - visiting this web site may harm
your computer.

What happened when Google visited this site?

Of the 4 pages we tested on the site over the past 90 days, 0
page(s) resulted in malicious software being downloaded and installed
without user consent. The last time Google visited this site was on
07/23/2008, and suspicious content was never found on this site within
the past 90 days.

Has this site acted as an intermediary resulting in further
distribution of malware?

Over the past 90 days, www.mylifeorganized.net/ did not appear to
function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90
days.

How did this happen?

In some cases, third parties can add malicious code to legitimate
sites, which would cause us to show the warning message.

Andrey Tkachuk (MLO)

unread,
Aug 5, 2008, 4:54:52 AM8/5/08
to MyLifeOrganized
Update on the situation: Google still reporting our site distributing
badware. Independent experts on the other hand could NOT find anything
on our site. Still waiting for Google .....

StopBadware report:
http://www.stopbadware.org/reports/container?reportname=http://www.mylifeorganized.net/

“Status: Review in process: StopBadware testing could not verify
Google's finding of badware behavior on this site. Sending to Google
for further evaluation. as of 08/04/2008”

Andrey.


On Jul 26, 10:26 am, "Andrey Tkachuk (MLO)"
<for...@mylifeorganized.net> wrote:
> This is to inform that MLO site was attacked yesterday. Links to
> malicious software have been integrated to all htm files. We have
> discovered this incident in a few hours after the attack.
>
> The site has been restored and it is working normally now.
>
> I STRONGLY RECOMMEND CHECKING YOUR COMPUTER FOR MALICIOUS SOFTWARE IF
> YOU VISITED WWW.MYLIFEORGANIZED.NET SITE IN PERIOD FROM 7/24/08 TO
> 7/25/08
>
> The site is still listed as untrusted by Google until they review my
> request to verify the site.
>
> More details from Google Safe Browsing Diagnostic page:http://www.google.com/safebrowsing/diagnostic?site=http://mylifeorgan...
>
> What is the current listing status forwww.mylifeorganized.net/?
>
> Site is listed as suspicious - visiting this web site may harm
> your computer.
>
> What happened when Google visited this site?
>
> Of the 4 pages we tested on the site over the past 90 days, 0
> page(s) resulted in malicious software being downloaded and installed
> without user consent. The last time Google visited this site was on
> 07/23/2008, and suspicious content was never found on this site within
> the past 90 days.
>
> Has this site acted as an intermediary resulting in further
> distribution of malware?
>
> Over the past 90 days,www.mylifeorganized.net/did not appear to

Andrey Tkachuk (MLO)

unread,
Aug 7, 2008, 5:42:34 PM8/7/08
to MyLifeOrganized
MLO site has been just removed from the black list.

This was quite stressful situation for me. For those who interested in
more details:
http://groups.google.com/group/stopbadware/browse_thread/thread/43e89b20ae4fc9a6#

The interesting thing I found is that Google itself might be
compromised also:
http://www.google.com/safebrowsing/diagnostic?site=http://www.google.com/

If you have your own site I wish you never been hacked and placed on
Google's black list. It is so hard to get out of there....

Andrey.
Reply all
Reply to author
Forward
0 new messages