Epic fail на 31 000 рублей

Вчера ночью злоумышленники, используя установленный на одной базе WordPress совершили инъекцию, пополнив свой баланс на 31000 рублей в системе регистрации доменов, которая принадлежит нам.

- Понятно, что зарегистрированных на эти деньги доменов им не видать, как своих ушей.

- Понятно, что они один разок засветили свой реальный ip, который благополучно отправился в нужные руки.

- Понятно, что WordPress дырявая штука, но скорее всего критический fail-уязвимость был в одном из плагинов.


1) -31000 (-)

2) Урок на всю жизнь (+).

3) Будем использовать http://dklab.ru/lib/DbSimple/ и не использовать wp with plugins на офф. сайтах. (+)

10 коммент.

  • 9 мая 2019 | 11:49

    I simply had to thank you very much once again. I’m not certain what I would’ve taken care of without the actual recommendations provided by you relating to that question. It absolutely was a very terrifying problem for me personally, however , witnessing a new well-written tactic you processed it forced me to leap for joy. Now i am happy for your advice and wish you are aware of a great job you’re putting in teaching most people by way of your websites. I’m certain you have never got to know any of us.

  • 13 мая 2019 | 13:48

    I simply desired to thank you so much once again. I’m not certain the things I might have handled in the absence of those aspects discussed by you on such a subject matter. It had been a horrifying issue in my circumstances, nevertheless encountering your well-written fashion you resolved the issue made me to weep with fulfillment. Now i am thankful for the information and in addition hope you are aware of a great job that you’re getting into educating some other people by way of your site. Most likely you haven’t come across all of us.

  • 18 мая 2019 | 4:59

    I would like to show my appreciation to you just for bailing me out of this type of predicament. As a result of surfing around through the internet and coming across methods which are not beneficial, I assumed my life was done. Living without the presence of approaches to the issues you’ve sorted out by way of your main report is a crucial case, and those which may have in a wrong way affected my entire career if I had not encountered your blog. Your personal mastery and kindness in playing with almost everything was excellent. I don’t know what I would have done if I had not encountered such a point like this. I’m able to now look ahead to my future. Thanks very much for this impressive and effective guide. I will not hesitate to suggest your blog post to any individual who desires care about this issue.

  • 22 мая 2019 | 1:33

    I enjoy you because of your own hard work on this blog. Ellie delights in doing investigation and it’s easy to understand why. We know all relating to the dynamic tactic you give very useful tricks through the blog and in addition welcome participation from other individuals on the concern and our favorite princess is truly starting to learn a lot. Take pleasure in the remaining portion of the new year. You’re the one doing a really good job.

  • 22 мая 2019 | 9:34

    I’m commenting to make you understand of the wonderful experience my cousin’s daughter experienced checking the blog. She came to understand so many details, most notably what it is like to have an excellent giving nature to get many others completely grasp several hard to do subject matter. You truly surpassed her expectations. Thank you for showing those great, trustworthy, revealing and even cool guidance on your topic to Lizeth.

  • 26 мая 2019 | 17:25

    I must get across my passion for your kind-heartedness for individuals who should have help on this one issue. Your personal dedication to passing the message along appears to be unbelievably practical and has continuously made girls like me to achieve their aims. This warm and helpful guide implies a whole lot a person like me and much more to my office workers. Thanks a ton; from each one of us.

  • 30 мая 2019 | 9:23

    I just wanted to compose a simple comment so as to express gratitude to you for the remarkable tips you are giving out at this site. My extensive internet search has at the end of the day been paid with really good strategies to write about with my relatives. I would express that we website visitors actually are unquestionably lucky to exist in a great place with so many outstanding professionals with beneficial ideas. I feel really fortunate to have encountered your entire website and look forward to tons of more amazing times reading here. Thanks once again for all the details.

  • 3 июня 2019 | 16:36

    I am also commenting to let you be aware of what a fabulous experience my cousin’s princess found going through yuor web blog. She mastered lots of issues, which include what it is like to have a wonderful teaching mindset to get the rest clearly master a variety of problematic issues. You undoubtedly exceeded visitors’ expectations. I appreciate you for producing the practical, safe, educational and unique thoughts on the topic to Evelyn.

  • 7 июня 2019 | 4:58

    I wanted to compose a quick message in order to say thanks to you for some of the marvelous tips and hints you are writing at this website. My rather long internet investigation has at the end of the day been compensated with awesome ideas to go over with my family members. I would repeat that many of us site visitors are really lucky to live in a really good network with many awesome professionals with very helpful techniques. I feel really lucky to have seen your entire website page and look forward to really more thrilling moments reading here. Thanks a lot once again for everything.

  • 10 июня 2019 | 21:37

    My spouse and i got absolutely excited that John could finish up his researching while using the precious recommendations he was given through your blog. It is now and again perplexing to just happen to be freely giving tactics which often men and women may have been selling. And we consider we have the website owner to be grateful to because of that. These explanations you have made, the easy web site menu, the relationships your site make it easier to engender — it is mostly powerful, and it’s letting our son in addition to our family understand this issue is brilliant, which is quite essential. Many thanks for all the pieces!


Пожалуйста, зарегистрируйтесь для комментирования.

Блог Сергея Шепелева. Сэр, извольте оставить копирайт © 2010-2019