Norton flipping out about our site

General discussion forum for both Umbral Advent members and non-members. VISIBILITY: Public
User avatar
Bladebreaker
Warlord
Warlord
Posts: 851
x 20
x 432
Contact:

Norton flipping out about our site

Post by Bladebreaker » Wed Aug 17, 2016 3:44 pm

So my Norton security suddenly began to completely wig out about our web site:
Warningscreen.jpg
Warningscreen.jpg (180.78 KiB) Viewed 1122 times
Specifically:

http://umbraladvent.com/wp-content/them ... index.html

Any idea what that's all about?
0 x

User avatar
admin
Site Admin
Site Admin
Posts: 146
x 258
x 33

Re: Norton flipping out about our site

Post by admin » Thu Aug 18, 2016 10:51 pm

Whoa. Scary. We shouldn't have such a theme. Investigating.
0 x

User avatar
admin
Site Admin
Site Admin
Posts: 146
x 258
x 33

Re: Norton flipping out about our site

Post by admin » Thu Aug 18, 2016 11:00 pm

Well, I nuked that theme, but I don't know how it was installed. WordPress is generally pretty secure and my installation is up to date. I couldn't find any info about this particular phishing attack elsewhere. I'm still poking around.
0 x

User avatar
admin
Site Admin
Site Admin
Posts: 146
x 258
x 33

Re: Norton flipping out about our site

Post by admin » Thu Aug 18, 2016 11:00 pm

The filestamps were from August 13, so it was installed recently.
0 x

User avatar
admin
Site Admin
Site Admin
Posts: 146
x 258
x 33

Re: Norton flipping out about our site

Post by admin » Thu Aug 18, 2016 11:17 pm

Installation wasn't actually up to date. And the WordPress site wasn't working (beyond the home page) because somehow my .htaccess file had been written to help support that phishing attack.

I am creating a support ticket to investigate.

I've now applied the latest patch to WordPress, and will keep an eye on things, but yeah, we were hacked.
0 x

User avatar
admin
Site Admin
Site Admin
Posts: 146
x 258
x 33

Re: Norton flipping out about our site

Post by admin » Thu Aug 18, 2016 11:18 pm

In other news, it's been a year since I have posted any news articles to the front page. Time flies.
0 x

User avatar
admin
Site Admin
Site Admin
Posts: 146
x 258
x 33

Re: Norton flipping out about our site

Post by admin » Fri Aug 19, 2016 12:31 pm

I've locked down some permissions and added some security plugins to alert me if files are changed without my knowledge.

I think I've repaired the damage and closed the door, but would appreciate if you all alert me right away if you see anything suspicious.

Thanks!
0 x

User avatar
Bone Lotus
Stone Guard
Stone Guard
Posts: 123
x 168
x 44
Contact:

Re: Norton flipping out about our site

Post by Bone Lotus » Fri Aug 19, 2016 1:53 pm

Thank you for your diligence and vigilance! <3
2 x

User avatar
Ribcrack
Champion
Champion
Posts: 385
x 65
x 98
Contact:

Re: Norton flipping out about our site

Post by Ribcrack » Sat Aug 20, 2016 8:24 am

<3 bregs
0 x

User avatar
Bladebreaker
Warlord
Warlord
Posts: 851
x 20
x 432
Contact:

Re: Norton flipping out about our site

Post by Bladebreaker » Tue Aug 30, 2016 1:22 pm

Norton is still mewling at me about it, but interestingly only on my laptop. My home PC thinks it's all good. It's this Norton SafeSearch site that has flagged it, and now I think it's just going to remain flagged until it's re-evaluated.
0 x

Post Reply