WordPress Iframe Hack: Sorta Fix
I enjoy not the hacks. Photo: Apple Logo and Flame
A couple of my sites, including this one, were compromised by an iframe hack. Some amorphous Internet blob puts fingers out into WordPress installs and puts one line of code in index.php, right above the first HTML tag. That code is an iframe with width=1 and height=1 (invisible) that manages to embed another (usually .cc domain on a site). Which then serves trojan horses or viruses or bullshit. Horrible.
Who does it? I dunno. It’s a business done at a grand, obscure scale. Darknet, Russians, whatever. Here’s how to fix it, at least temporarily.
1. Delete index.php in your WordPress install’s home folder (using FTP). Download a fresh WordPress and copy in a new file.
2. Delete and reinstall all plugins
3. Change all FTP, user and database passwords
4. Look around your WordPress install for suspicious looking files, or delete and reinstall the whole thing.
That holds this thing off at least temporarily, but I for one am just fed up. Shit keeps getting hacked all the time and, while I can almost always fix it, it’s slow and incredibly painful and sad.
I’m outsourcing this shit. Signing up for a Sucuri account and letting them handle security for like $25 a month (though all paid at once, gulp). It’s just too painful and it hurts business, gets me tossed of Google, etc. And I don’t understand how or whence it’s coming. If you notice anything odd over the next few days, lemme know.
More Reading:
Today on the 
Janith has updated 
This is highly dubious. Miss Travel is a travel/social networking site that connects ‘Generous’ and ‘Attractive’ travelers. To, like, travel together, I guess. It all seems a bit like arranged prostitution and trafficking. This is part of a broader online trend to connect rich men to younger, attractive women. Sites like 
Sri Lankan domestics never say anything, they just stop coming. My maid just stopped coming and when I finally pressed her she said I needed to get a washing machine. I was hoping to ride this one out, but I’ve run out of underwear and I have no choice. I finally caved and bought a washing machine, from 
I asked a friend about this and he told me not to install wordpress at all. He said that version 3 had really big security holes and he lost all faith in it.
Lefroy, people stone trees that have fruits. wordpress is the most popular blogging platform in the world. its super cool and has tons of plugins, themes and more. so naturally it will attract hackers. so don’t give up wordpress without giving it a try yourself :)
Sri,
I use wordpress. But I’m no expert about it. Not gonna give up wordpress though. Giving up Windows and using Fedora makes more sense than that.
[...] This is horrible. Has this site seen less malicious iframe hacks? Why yes it has. [...]