Attack site thru search but not direct url

[RetroPedro]

Never seen this before: if you search Google for "cupboardprofessionals" and click on the link for www.cupboardprofessionals.co.za, the site is reported as an attack site, but if you type the url directly, the site opens normally. Any ideas?

 

[w1z4rd]

Never seen this before: if you search Google for "cupboardprofessionals" and click on the link for www.cupboardprofessionals.co.za, the site is reported as an attack site, but if you type the url directly, the site opens normally. Any ideas?

Yeah. Cause google is giving you the warning, if you are not using them you wont see the warning...

 

[RetroPedro]

Yeah. Cause google is giving you the warning, if you are not using them you wont see the warning...

Thanks for having a look wiz, but when I do a search with Bing in IE, Trend Micro also blocks the site. Some piece of code seems to direct it to http: //fgnfdfthrv.bee.pl/ ?q=cupboardprofessionals (DO NOT OPEN!!!).

 

[w1z4rd]

Thanks for having a look wiz, but when I do a search with Bing in IE, Trend Micro also blocks the site. Some piece of code seems to direct it to http: //fgnfdfthrv.bee.pl/ ?q=cupboardprofessionals (DO NOT OPEN!!!).

Yeah, these perl scripts are big pains. The site has a bad script on it it seems. See`ing a lot of these lately.

 

[RetroPedro]

Yip, it's a Joomla site that's been hacked. The script does a conditional redirect which occurs only when the referrer is a search engine. So we learn...

 

[Divestar]

(DO NOT OPEN!!!).

What happens if I do?

 

[RetroPedro]

I dare you ;0) I dared and windows popped up with a fake malware scan, I closed to fast to see what the end result was gonna be!

 

[Raithlin]

Someone open it in Linux and check the source.