A transient hack

Hi folks,

A few days ago, we were looking at a website that was being blogged about (on Jan 21st) as being hacked, but when we looked (on Jan 21st) it was already clean. What we normally do in such cases is go to the google cache, and that usually gets us a copy of the exploit, but in this case, it was clean in the cache as well, so... what gives???

The google bots went past three days earlier, so we wondered if there was a different result from the other search engine caches, and lo and behold, the yahoo cache was still infective. :-)

Now, yahoo doesn't show the date that they went by, but a quick email exchange with the blog author confirmed that it was definitely infective on the 21st.

What this means is that it was clean on the 18th, but hacked after that, and then cleaned on the 21st.

Just for fun, we made this vid about it...



Keep safe folks

Roger