Alex Scheel Meyer Weblog

When going through the files on the server today, I found a suspicious block of php code at the top of every php-file! It was encrypted by encoding it in base 64 and then wrapping it in

eval(base64_decode(’<data>’))

I haven’t really tried to decode it much, but it seems to be some kind of spamming mechanism

Naturally I am not so thrilled about the major cleanup this involves, oh well - this is probably a good time to update Wordpress aswell then