Karen Chun's Blog (4)

Watch out for a new server infection.  No one is sure but it is thought it begins with brute force guessing of a wordpress login.

Then every php file is prepended with:

They're baaaack! We fought SOPA but now the media companies have come up with something even worse - and they're trying to get it through via the Trans-Pacific Partnership Treaty. https://www.eff.org/issues/tpp

It's instructive to watch the various malicious bots troll through your server looking for vulnerabilities.  Woe betide you if they find one!  Even Wordpress.com has been hacked.  Prior to that, at the beginning of this year, a significant number of stand alone Wordpress installations were hacked when their owners did not update to the newest security release.

Here's how you can recognize a malicious bot.  If you are using Cpanel, go to "Error Log".  You'll see a whole list…