As you may have already noticed, Wordpress 2.5 is here! But did you know that you have to upgrade as soon as possible if you don't want your blog to be hijacked by Wily JavaScript?

As I reported in the Antivirus blog Shoemoney.com reported that people had had their blogs "hacked", but it was uncertain how. I just read in the TrendLabs blog how the haijacking actualy works.

In short your blog gets attacked and a small Javascript code is inserted. Then a directory called 1 (just the number one) is created in your wp-content directory. This script then populates the created folder with a list of various spammy Web page links that are mostly related to adult sites and gambling sites.

To find out if your Wordpress installation has been infected you need to check for a directory called 1 in your wp-content directory.  That's all for today since I'm going to upgrade all my blogs already today

You may also be interested in...
Version 2.6 of Wordpress
Upgrade to Wordpress 2.6.5
Upgrade Wordpress to 2.6.2 – Security Upgrade

This entry was posted on Monday, March 31st, 2008 at 6:48 pm and is filed under Blogging. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.