Sucuri Malware Labs

Sucuri on Twitter Sucuri on Facebook Sucuri on LinkedIn

Malware entry: MW:GDD:6Home  |  Notes  |  Malware data  |  Signatures  |  Tools  |  About

Description:

Code used to insert a malicious javascript on many WordPress sites hosted at GoDaddy. The malicious code is added to the database, infecting every post. Loads the malware from lessthenaminutehandle.com and many other domains:


Generally infecting all WordPress posts. More details here: http://blog.sucuri.net/2011/02/hilary-kneber-godaddy-and-welcometotheglobalisnet-com.html


Clean up:

Contact support@sucuri.net.


Malware dump:


For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb