We’re popular – but with the wrong people

Written By: - Date published: 2:25 pm, October 5th, 2008 - 10 comments
Categories: admin - Tags: , ,

Lynn PrenticeAfter a lot of work both by a few e-mails from people here and by the good services of some people on nz.comp (google seems to be a little behind on the messages) I finally found the link to the malware site that was attached itself to the site footer.

The material that it was trying to introduce to people reading the site may include various forms of backdoors. It would be adviseable to run a good virus scan on your system if you have read the site in the last couple of weeks. Corporate systems shouldn’t have had an issue because the site it was linking to has been a well known chinese malware site for a long time.

The anti-virus/malware scans missed it at the server because it was a new variant of an old problem (the same one I had in march), targeted specifically at wordpress sites using what is evidently is still a open vunerability. My own checking of the site missed it because it had managed to leave all of the file attributes of the file (size, times, etc) exactly the same as the origionals. My attempts to see what people were reporting had failed because it only emitted the malware link out periodically. A dump of the web page at the client side by Stephen Worthington allowed me to see exactly what it was doing.

The vunerability it was exploiting was meant to have been fixed in wordpress 2.5, however they seem to have found another vunerability. The downside of having open source software is that it is possible to read the code looking for holes. I’ve done some things to reduce possible problems, but I now have MD5 hash check of the files running periodically which will fix the problem if it happens again. I’ve also reported the details to wordpress and a couple of other sites.

But there are some very creative people out there writing this stuff, and evidently this site is popular with them.

Lynn

10 comments on “We’re popular – but with the wrong people ”

  1. r0b 1

    Oh hurrah!

    if you have read the site in the last couple of weeks.

    Once or twice…

    So, do you have any idea as to what to look for (by way of backdoor payloads) on our systems? What files where?

    Is MacOS X affected?

  2. lprent 2

    Mostly what it did was to set a cookie on thestandard.org.nz with the name ‘yagh’. It then attempted to bring in links from a site in china. Which then branched off into other sites (about 15). It did it once and then stopped doing it – the code said that it only did it if the cookie wasn’t present.

    I have a log (on the nz.comp) of what it was trying to do in one instance – starts at gstats (dot) com. I’m not too sure exactly what in the hell it was doing (and I’m unwilling to go to the sites to find out).

    Most of them are probably just trying to raise the google rank. But it is a good bet that at least some of them tried to install something.

    I’ve never seen any of this going on. I got the cookie but got silent blocking on the rest. When I cleared the cookie and made the AV non-silent, then I got a series of malware site warnings.

  3. Draco T Bastard 3

    The downside of having open source software is that it is possible to read the code looking for holes.

    That’s also the upside. I suspect that there are more people reading the code who will be honest and report, and possibly fix, the vulnerability than will be people looking for a back door.

  4. Rex Widerstrom 4

    It hit me and I ran screaming (well, figuratively) away and ran various checks which came up with nothing. But I’ll do it again now I have some idea of what to look for.

    Thanks for your sterling efforts, Lynn. You really should have some sort of mask, cape, and maybe a lycra suit (I’m sure Michael Laws can spare one from his wardrobe).

    As an aside, I can understand spending time on creating these annoyances to gain something (e.g. a higher Google ranking, which = hits which, they hope, = money). But I’ve never got my head round the idiots who merely create destruction. I mean yes, we know Microsoft is the Evil Empire with buggy software and more holes than a pole dancer’s crotch piece. Unleashing yet another piece of malware isn’t telling us anything new :-/

  5. Emma 5

    Thank you Lyn.I was frightened as I thought I had been hit up the backdoor by some nasty thing.

  6. r0b 7

    (duplicate could be removed – ta)

    Mostly what it did was to set a cookie on thestandard.org.nz with the name ‘yagh’.

    Mine has ‘yahg’ so I’m guessing your typo above. Thanks, and let us know if anything crops up that we should be testing for / looking out for.

  7. Tara 8

    Treat it as a perverse compliment – we must be doing something right.

    MacOS X is based on a version of BDS Linux and should not be affected.

    Fine Hacking, Lynn ..

  8. r0b 9

    Yes (BSD Unix) that means we’re almost certainly safe, given that most malware targets the Windows monoculture, but you never know. I had a Mac virus once back in 1993, so anything’s possible, one day I might get another…

  9. Phil 10

    I was frightened as I thought I had been hit up the backdoor by some nasty thing.

    Giggity Giggity!!! Oh yeah…

    Quagmire is my hero

Recent Comments

Recent Posts

  • EV road user charges bill passes
    Transport Minister Simeon Brown has welcomed the passing of legislation to move light electric vehicles (EVs) and plug-in hybrid electric vehicles (PHEVs) into the road user charges system from 1 April.  “It was always intended that EVs and PHEVs would be exempt from road user charges until they reached two ...
    BeehiveBy beehive.govt.nz
    16 hours ago
  • Bill targets illegal, unregulated fishing in international waters
    New Zealand is strengthening its ability to combat illegal fishing outside its domestic waters and beef up regulation for its own commercial fishers in international waters through a Bill which had its first reading in Parliament today. The Fisheries (International Fishing and Other Matters) Amendment Bill 2023 sets out stronger ...
    BeehiveBy beehive.govt.nz
    17 hours ago
  • Reserve Bank appointments
    Economists Carl Hansen and Professor Prasanna Gai have been appointed to the Reserve Bank Monetary Policy Committee, Finance Minister Nicola Willis announced today. The Monetary Policy Committee (MPC) is the independent decision-making body that sets the Official Cash Rate which determines interest rates.  Carl Hansen, the executive director of Capital ...
    BeehiveBy beehive.govt.nz
    18 hours ago
  • Stronger protections for apartment owners
    Apartment owners and buyers will soon have greater protections as further changes to the law on unit titles come into effect, Housing Minister Chris Bishop says. “The Unit Titles (Strengthening Body Corporate Governance and Other Matters) Amendment Act had already introduced some changes in December 2022 and May 2023, and ...
    BeehiveBy beehive.govt.nz
    20 hours ago
  • Travel focused on traditional partners and Middle East
    Foreign Minister Winston Peters will travel to Egypt and Europe from this weekend.    “This travel will focus on a range of New Zealand’s traditional diplomatic and security partnerships while enabling broad engagement on the urgent situation in Gaza,” Mr Peters says.   Mr Peters will attend the NATO Foreign ...
    BeehiveBy beehive.govt.nz
    20 hours ago
  • Keep safe on our roads this Easter
    Transport Minister Simeon Brown is encouraging all road users to stay safe, plan their journeys ahead of time, and be patient with other drivers while travelling around this Easter long weekend. “Road safety is a responsibility we all share, and with increased traffic on our roads expected this Easter we ...
    BeehiveBy beehive.govt.nz
    23 hours ago
  • Cost of living support for over 1.4 million Kiwis
    About 1.4 million New Zealanders will receive cost of living relief through increased government assistance from April 1 909,000 pensioners get a boost to Superannuation, including 5000 veterans 371,000 working-age beneficiaries will get higher payments 45,000 students will see an increase in their allowance Over a quarter of New Zealanders ...
    BeehiveBy beehive.govt.nz
    23 hours ago
  • Tenancy reviews for social housing restart
    Ensuring social housing is being provided to those with the greatest needs is front of mind as the Government restarts social housing tenancy reviews, Associate Housing Minister Tama Potaka says. “Our relentless focus on building a strong economy is to ensure we can deliver better public services such as social ...
    BeehiveBy beehive.govt.nz
    24 hours ago
  • Kermadec Ocean Sanctuary plan halted
    The Kermadec Ocean Sanctuary will not go ahead, with Cabinet deciding to stop work on the proposed reserve and remove the Bill that would have established it from Parliament’s order paper. “The Kermadec Ocean Sanctuary Bill would have created a 620,000 sq km economic no-go zone,” Oceans and Fisheries Minister ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Cutting all that dam red tape
    Dam safety regulations are being amended so that smaller dams won’t be subject to excessive compliance costs, Minister for Building and Construction Chris Penk says. “The coalition Government is focused on reducing costs and removing unnecessary red tape so we can get the economy back on track.  “Dam safety regulations ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Drought support extended to parts of North Island
    The coalition Government is expanding the medium-scale adverse event classification to parts of the North Island as dry weather conditions persist, Agriculture Minister Todd McClay announced today. “I have made the decision to expand the medium-scale adverse event classification already in place for parts of the South Island to also cover the ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Passage of major tax bill welcomed
    The passing of legislation giving effect to coalition Government tax commitments has been welcomed by Finance Minister Nicola Willis.  “The Taxation (Annual Rates for 2023–24, Multinational Tax, and Remedial Matters) Bill will help place New Zealand on a more secure economic footing, improve outcomes for New Zealanders, and make our tax system ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Lifting economy through science, tertiary sectors
    Science, Innovation and Technology Minister Judith Collins and Tertiary Education and Skills Minister Penny Simmonds today announced plans to transform our science and university sectors to boost the economy. Two advisory groups, chaired by Professor Sir Peter Gluckman, will advise the Government on how these sectors can play a greater ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Government announces Budget priorities
    The Budget will deliver urgently-needed tax relief to hard-working New Zealanders while putting the government’s finances back on a sustainable track, Finance Minister Nicola Willis says.  The Finance Minister made the comments at the release of the Budget Policy Statement setting out the Government’s Budget objectives. “The coalition Government intends ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Government to consider accommodation solution
    The coalition Government will look at options to address a zoning issue that limits how much financial support Queenstown residents can get for accommodation. Cabinet has agreed on a response to the Petitions Committee, which had recommended the geographic information MSD uses to determine how much accommodation supplement can be ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Government approves extension to Royal Commission of Inquiry into Abuse in Care
    Cabinet has agreed to a short extension to the final reporting timeframe for the Royal Commission into Abuse in Care from 28 March 2024 to 26 June 2024, Internal Affairs Minister Brooke van Velden says.                                         “The Royal Commission wrote to me on 16 February 2024, requesting that I consider an ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • $18m boost for Kiwis travelling to health treatment
    The coalition Government is delivering an $18 million boost to New Zealanders needing to travel for specialist health treatment, Health Minister Dr Shane Reti says.   “These changes are long overdue – the National Travel Assistance (NTA) scheme saw its last increase to mileage and accommodation rates way back in 2009.  ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • PM’s Prizes for Space to showcase sector’s talent
    The Government is recognising the innovative and rising talent in New Zealand’s growing space sector, with the Prime Minister and Space Minister Judith Collins announcing the new Prime Minister’s Prizes for Space today. “New Zealand has a growing reputation as a high-value partner for space missions and research. I am ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Concerns conveyed to China over cyber activity
    Foreign Minister Winston Peters has confirmed New Zealand’s concerns about cyber activity have been conveyed directly to the Chinese Government.     “The Prime Minister and Minister Collins have expressed concerns today about malicious cyber activity, attributed to groups sponsored by the Chinese Government, targeting democratic institutions in both New ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Independent Reviewers appointed for School Property Inquiry
    Independent Reviewers appointed for School Property Inquiry Education Minister Erica Stanford today announced the appointment of three independent reviewers to lead the Ministerial Inquiry into the Ministry of Education’s School Property Function.  The Inquiry will be led by former Minister of Foreign Affairs Murray McCully. “There is a clear need ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Brynderwyns open for Easter
    State Highway 1 across the Brynderwyns will be open for Easter weekend, with work currently underway to ensure the resilience of this critical route being paused for Easter Weekend to allow holiday makers to travel north, Transport Minister Simeon Brown says. “Today I visited the Brynderwyn Hills construction site, where ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Speech to the Infrastructure Funding & Financing Conference
    Introduction Good morning to you all, and thanks for having me bright and early today. I am absolutely delighted to be the Minister for Infrastructure alongside the Minister of Housing and Resource Management Reform. I know the Prime Minister sees the three roles as closely connected and he wants me ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Parliamentary network breached by the PRC
    New Zealand stands with the United Kingdom in its condemnation of People’s Republic of China (PRC) state-backed malicious cyber activity impacting its Electoral Commission and targeting Members of the UK Parliament. “The use of cyber-enabled espionage operations to interfere with democratic institutions and processes anywhere is unacceptable,” Minister Responsible for ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • NZ to provide support for Solomon Islands election
    Foreign Minister Winston Peters and Defence Minister Judith Collins today announced New Zealand will provide logistics support for the upcoming Solomon Islands election. “We’re sending a team of New Zealand Defence Force personnel and two NH90 helicopters to provide logistics support for the election on 17 April, at the request ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • NZ-EU FTA gains Royal Assent for 1 May entry to force
    The European Union Free Trade Agreement Legislation Amendment Bill received Royal Assent today, completing the process for New Zealand’s ratification of its free trade agreement with the European Union.    “I am pleased to announce that today, in a small ceremony at the Beehive, New Zealand notified the European Union ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • COVID-19 inquiry attracts 11,000 submissions
    Public consultation on the terms of reference for the Royal Commission into COVID-19 Lessons has concluded, Internal Affairs Minister Hon Brooke van Velden says.  “I have been advised that there were over 11,000 submissions made through the Royal Commission’s online consultation portal.” Expanding the scope of the Royal Commission of ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Families to receive up to $75 a week help with ECE fees
    Hardworking families are set to benefit from a new credit to help them meet their early childcare education (ECE) costs, Finance Minister Nicola Willis says. From 1 July, parents and caregivers of young children will be supported to manage the rising cost of living with a partial reimbursement of their ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Unlocking a sustainable, low-emissions future
    A specialised Independent Technical Advisory Group (ITAG) tasked with preparing and publishing independent non-binding advice on the design of a "green" (sustainable finance) taxonomy rulebook is being established, Climate Change Minister Simon Watts says.  “Comprising experts and market participants, the ITAG's primary goal is to deliver comprehensive recommendations to the ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Chief of Army thanked for his service
    Defence Minister Judith Collins has thanked the Chief of Army, Major General John Boswell, DSD, for his service as he leaves the Army after 40 years. “I would like to thank Major General Boswell for his contribution to the Army and the wider New Zealand Defence Force, undertaking many different ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Minister to meet Australian counterparts and Manufacturing Industry Leaders
    25 March 2024 Minister to meet Australian counterparts and Manufacturing Industry Leaders Small Business, Manufacturing, Commerce and Consumer Affairs Minister Andrew Bayly will travel to Australia for a series of bi-lateral meetings and manufacturing visits. During the visit, Minister Bayly will meet with his Australian counterparts, Senator Tim Ayres, Ed ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Government commits nearly $3 million for period products in schools
    Government commits almost $3 million for period products in schools The Coalition Government has committed $2.9 million to ensure intermediate and secondary schools continue providing period products to those who need them, Minister of Education Erica Stanford announced today. “This is an issue of dignity and ensuring young women don’t ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • Speech – Making it easier to build.
    Good morning, it’s great to be here.   First, I would like to acknowledge the New Zealand Institute of Building Surveyors and thank you for the opportunity to be here this morning.  I would like to use this opportunity to outline the Government’s ambitious plan and what we hope to ...
    BeehiveBy beehive.govt.nz
    6 days ago
  • Pacific youth to shine from boost to Polyfest
    Minister for Pacific Peoples Dr Shane Reti has announced the Government’s commitment to the Auckland Secondary Schools Māori and Pacific Islands Cultural Festival, more commonly known as Polyfest. “The Ministry for Pacific Peoples is a longtime supporter of Polyfest and, as it celebrates 49 years in 2024, I’m proud to ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • 2024 Ngarimu VC and 28th (Māori) Battalion Memorial Scholarships announced
    ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Speech to Breast Cancer Foundation – Insights Conference
    Before moving onto the substance of today’s address, I want to recognise the very significant and ongoing contribution the Breast Cancer Foundation makes to support the lives of New Zealand women and their families living with breast cancer. I very much enjoy working with you. I also want to recognise ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Kiwi research soars to International Space Station
    New Zealand has notched up a first with the launch of University of Canterbury research to the International Space Station, Science, Innovation and Technology and Space Minister Judith Collins says. The hardware, developed by Dr Sarah Kessans, is designed to operate autonomously in orbit, allowing scientists on Earth to study ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Speech to the New Zealand Planning Institute
    Introduction Thank you for inviting me to speak with you today and I’m sorry I can’t be there in person. Yesterday I started in Wellington for Breakfast TV, spoke to a property conference in Auckland, and finished the day speaking to local government in Christchurch, so it would have been ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Support for Northland emergency response centre
    The Coalition Government is contributing more than $1 million to support the establishment of an emergency multi-agency coordination centre in Northland. Emergency Management and Recovery Minister Mark Mitchell announced the contribution today during a visit of the Whangārei site where the facility will be constructed.  “Northland has faced a number ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Celebrating 20 years of Whakaata Māori
    New Zealanders have enjoyed a broader range of voices telling the story of Aotearoa thanks to the creation of Whakaata Māori 20 years ago, says Māori Development Minister Tama Potaka. The minister spoke at a celebration marking the national indigenous media organisation’s 20th anniversary at their studio in Auckland on ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Some commercial fishery catch limits increased
    Commercial catch limits for some fisheries have been increased following a review showing stocks are healthy and abundant, Ocean and Fisheries Minister Shane Jones says. The changes, along with some other catch limit changes and management settings, begin coming into effect from 1 April 2024. "Regular biannual reviews of fish ...
    BeehiveBy beehive.govt.nz
    7 days ago

Page generated in The Standard by Wordpress at 2024-03-28T20:41:33+00:00