Tried to access a google link to an archive (http://www.dmctoday.com/archive/index.php?t-1668.html) and this page comes up as an online pharmacy ad for me. See screenshot below (if I uploaded it correctly)
Capture.jpg
Interestingly enough, if I go directly to the link in a new tab, I get the normal archive page as you'd expect, but if I click a link from a google search such as the one below, then I get this pharmacy page every single time. Tested in Chrome and Firefox so it's not something browser specific. All other archive pages that I've tested seem to work normally, but there are probably other issues in the back end that need to be checked out.
https://www.google.com/search?safe=o...egulator+shims -- second result for me was the link to the dmctoday archive linked above.
Most likely, the bad guys have inserted some code that looks for a 'referrer' of google or similar and kicks up the rogue page. If it doesn't see Google as the referrer, then it shows the normal page so that it is more stealthy and difficult to find.
This may be difficult to track down and fix, but I wouldn't trust anything on this site in the meantime. They could have easily compromised the username/password database too so very concerning...
Reply With Quote
Originally Posted by stevedmc
