Somehow, some way, about twelve hours after we started taking serious steps to rescue this site, and a year’s worth of work, Gaming Bus is back in action, and save some feature images, is pretty much as it was. Frankly, I’m stunned it took this little time.
What happened was easy: my FTP account – which serves Gaming Bus, my personal Superbusnet.com site, and the former home of FESS, was hit with an HTML code insertion malware, a variant of badsrc. This was a trojan horse that redirected people hit by it to Russian sites that installed worse malware. The trojan itself wasn’t a heavy hitter – most of my users use Firefox, and this script only runs in Internet Explorer – but the fact is that my sites were compromised.
Today, Crystal and I went through the process of reinstalling WordPress from scratch. There are a few consequences of this. The good news is that I’ve got all of the goodies – including tested-and-pushed updates and reporting tools – that come with Dreamhost-installed WordPress installations. However, to get to that point, everything had to go; I’m going to have to re-upload our Livestream videos in a few days. Also, the site right now looks ugly because our uploaded images are gone. However, thanks to Mel, they’re being put back in *singlehandedly*. Holy shit.
There was also the somewhat humourous effect of all of our reimported posts triggering Twitter updates, causing me to spam all of our followers. Whoops.
Massive thanks go to Mel, and also to Crystal. Simply put, without Crystal reinstalling WordPress, we wouldn’t be up right now. It’s as simple as that. Also, a big fuck you to me. I’m a security guy; you would think I’d be smart enough to not get nailed by some Russian malware bot, but this is simply a consequence of laziness and negligence. It won’t happen again; this was a wake-up call, and I’ll be feeling the pain as I remove this from Superbusnet and FESS as well.
We got out of a malware scare with minimal damage, losing only one day of productivity, some of my pride, and whatever it takes to say thanks to the ones that helped me today. I’d call that a success, considering the circumstances.