Be CAREFUL installing or downloading WP PLUGINS and THEMES!!!

[Omni Potens]

Lately we have found some infected plugins and themes being
shared here to INFECT members here.
And even on other forums its was been posted too aiming to infect members! Well i will NOT tolerate this on our forum!
Let's make this forum free from VIRUS or malware!

One supervip member here sold this script
(I forbid the selling/discussion of the said script in this PUBLIC section of BBHF anymore!).

Anyone caught will be given a proper infractions and may lead to Permanent ban.

Members should be aware that SCANNING it to virus total,
or any other VT scanner
and the results seems to be CLEAN,
It DOES NOT mean it is already clean.

Please kindly DOUBLE check the wp plugins or theme scripts and look for some malicious script being injected or obfuscated, inform everyone immediately if anyone found infected shares or members trying to infect us here!.

Do NOT trust NEW members posting new shares here.
even the virus total says its clean!
Please DOUBLE CHECK his shares and anyone find it infected. Please let me know immediately so i can ban this assh0l3!

DO NOT trust supervip or even supervip with "TRUSTED status" too posting shares that regards to scripts!
Lately we caught supervips and some of them was been permanently banned already.

If anyone found someone trying to INFECT members here will get INSTANTLY be BAN! If anyone found someone,

Please let me know immediately.
I highly advise everyone to be responsible enough.
Double check it carefully!
I will not tolerate this!!!

I found out that some supervip here is creating a new user account just to post and to infect thinking they are already safe from being banned. FOOL!!!
Be warned! I know who you are and to those who are planning to infect members here, do not think you will get away with this easily.

Be WARNED! I will NEVER tolerate this kind of act!!!

Special credit goes to simey69 for informing me and everyone here about the said infection.

Code:

http://bestblackhatforum.com/User-simey69

---

Normally the infected scripts is embedded with this sample code scripts like this:



This can also be obfuscated.
Please double check the scripts being shared and look for some MALICIOUS code being injected.
If anyone found member trying to infect us here.
Please post on his thread and let me know so i can ban this assh0l3!!!

[It'sOkayNow]

I don't know why peoples sharing viruses. Are they getting paid by any Antivirus companies?

If so, then they bring us problem to make money. Karma have it's own way to reach people.

[Meltdown]

Thats a really a relief sort of thing for me. I have been a victim of the same. I used one of shared WP theme and installed in a buisnessplan hosting. after 1 week my hosting got suspended. Reason was malicious stuff. Finally I end up in loosing the hosting and the reputation too.
Some guide to remove these scripts will be useful for newbies like us.

[jello]

THX, for doing anything!
Last time, when I noticed that in the public, I was attacked by a so called supervip. He called me names and gave me bad i traders.
Good to see, that mods have found time, trying to solve this prob.

[simey69]

Happy to help!!

I hate this sort of stuff, never feed of your own community!

If anyone is unsure about any plugin/theme/script etc - drop me a pm

Si

[knight]

Thanks DIRECT DOWNLOAD and simey69 for this info and offering to scan the suspicious scripts. It's a shame when SuperVIP's does this to the community that they appear a leader of.

[frigean]

First of all, thanks for all the work you do to keep everything clean.

If I can put my shoulder to the wheel, I would recommend to use two plugins

TAC (Theme Authenticity Checker)
Threat Scan Plugin

Both will check for any malicious/encrypted code in the plugin or the theme.

Hope it helps
Thanks

[HighSkilledExploiter]

Problem here was that those supervip who had been granted a TRUSTED status used their knowledge to the extent of abusing even fellow members here. Yeah you learned something knowledgeable, with too much power/wisdom and now CONSUME by greed for MONEY! Quite true for others out there!

Even i myself knows a lot of exploit (yeah my name says it all) but NEVER did I abuse it by all means.
I suggest that ADMIN, LALA, Direct Download should make it quite difficult to achieved TRUSTED Status.
And about this upcoming GOLDMINE section.
I just hope they will be strict enough in allowing members in the GOLDMINE section.

[simey69]

Hi,

Thanks Frigean,

I use a sacrificial site for much of my testing - for nulling/cleaning and testing suspect code..

I'll grab those plugins over the weekend and run some infected plugins and themes through them (I have kept copies)- will report back on the success rate of them.

Si,

[Meltdown]

is there any way to make a mechanism in BBHF that when people share the scripts it will be passed by the well known testers who can certify that there is no malicious stuff injected to these scripts?
may be it calls for appointing someone who can do it or some responsible guys should take this authority in consent with Admin, Lala or Direct download.