On 1/10/2020 10:15 AM, between "Kurt Weiske : August Abolins":

The problem isn't the known risky sites, as they get caught
in most web filters, like the ones in Chrome and Firefox.
Poorly managed web sites, like the mom-and-pop bed and
breakfast, or auto shop that get hijacked are more
problematic.

Even my personal blog was infected at one point and was
sending out malware to people who visited it.

I've had infections on several of the sites that I manage. The results
are often a white page with no results. Just a 2 months ago, one was
successful to redirect visitors directly to a pharma site.

Wordpress is a popular target for these infections. I get the php
injections that are often found in the functions.php file. It's
relatively easy to clean them out. Then, it is just a matter of locking
down the directories of files as read-only.

--- Thunderbird 2.0.0.24 (Windows/20100228)
* Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)

On 12 Jan 20 05:48:11, August Abolins said the following to Kurt Weiske:

Wordpress is a popular target for these infections. I get the php injections that are often found in the functions.php file. It's
relatively easy to clean them out. Then, it is just a matter of locking down the directories of files as read-only.

Oh man, don't get me started on WP... I swear its freaking swiss cheese. It seems to have more security-related updates than Windows.

I suppose the recent versions are much more secure but there was a time I certainly had my hands full cleaning up WP sites. Maybe to be a bit fair it may of had something to do with poor setup of Apache by the webadmin.

Nick

--- Renegade vY2Ka2
* Origin: Joey, do you like movies about gladiators? (1:229/426)