5 billion search sc...
 

  You don't need to be an 'investor' to invest in Singletrack: 6 days left: 95% of target - Find out more

[Closed] 5 billion search scam

9 Posts
6 Users
0 Reactions
51 Views
Posts: 386
Full Member
Topic starter
 

Does anyone know anything about this scam? A friend's website seems to have been hacked to redirect to the scam website. My Google search brings up lots of info about malware being installed on your computer/phone/tablet but I don't see this affecting any other websites. It looks like a fairly straightforward redirection of this one domain name. Has anyone any experience of this?


 
Posted : 07/12/2020 2:11 pm
Posts: 0
Full Member
 

Are you sure this post isn't a scan to get us to search for 5 Billion Search Scam 😀 ?


 
Posted : 07/12/2020 2:15 pm
Posts: 386
Full Member
Topic starter
 

I'm sure, are you?


 
Posted : 07/12/2020 2:31 pm
Posts: 0
Full Member
 

No - not in the slightest...


 
Posted : 07/12/2020 2:46 pm
Posts: 13369
Full Member
 

I searched for it and got directed here


 
Posted : 08/12/2020 9:14 am
Posts: 8613
Full Member
 

Has something updated your/his local hosts file? It's either that, the Internet DNS record has been changed or the web-site itself is doing the redirection.


 
Posted : 08/12/2020 10:11 am
Posts: 386
Full Member
Topic starter
 

I wondered whether a file had been uploaded,e.g. index.html, index.php or a new .htaccess. Any of these could trigger a redirection. I don't have access at the moment to the server to check, and am a bit reluctant to do it in case I get hacked as well.


 
Posted : 08/12/2020 1:44 pm
Posts: 0
Free Member
 

I had a site hacked. It was a Wordpress hack, even though it wasn't actually a Wordpress site, I suspect the hackers got access to the root folder of all the sub-domains and simply blatted everything.

The hack replaced index.php plus added a few other "things" as well as altering permissions on certain files and folders. Took a bit of cleaning up but some of the permissions I hadn't got privileges to change so needed the provider to do that. Actually the permissions were weird, I could move/rename the files but not delete them.

I think I've still got the files somewhere just for interest.


 
Posted : 08/12/2020 2:18 pm
Posts: 386
Full Member
Topic starter
 

Thanks @whitestone. That was what I had in mind.


 
Posted : 08/12/2020 4:22 pm
Posts: 0
Free Member
 

Correct, I've come across a few of these too. When I checked the source code, I noticed that the hackers were using an iframe to take over the browser's viewing port. In other words, the page's content is there, but completely hidden from view. They're probably exploiting a vulnerability in a Wordpress theme or plugin.


 
Posted : 08/12/2020 4:23 pm

6 DAYS LEFT
We are currently at 95% of our target!