Deprecated: Return type of HM\BackUpWordPress\CleanUpIterator::accept() should either be compatible with FilterIterator::accept(): bool, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/backupwordpress/classes/class-path.php on line 456
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
Warning: preg_replace(): Compilation failed: invalid range in character class at offset 4 in /home/viniciusbig/viniciusarantes.com.br/wp-content/plugins/crayon-syntax-highlighter/crayon_langs.class.php on line 340
{"id":461,"date":"2017-04-24T16:35:10","date_gmt":"2017-04-24T19:35:10","guid":{"rendered":"http:\/\/www.viniciusarantes.com.br\/?p=461"},"modified":"2020-10-14T09:22:07","modified_gmt":"2020-10-14T12:22:07","slug":"black-seo-wordpress-malware","status":"publish","type":"post","link":"https:\/\/www.viniciusarantes.com.br\/black-seo-wordpress-malware\/","title":{"rendered":"Black SEO WordPress Malware"},"content":{"rendered":"Recentemente cruzei com o problema de um cliente com um c\u00f3digo malicioso que apareceu em seu site e que, mesmo depois de removido, voltada depois de um tempo.<\/p>\n
Esse c\u00f3digo \u00e9 injetado nos arquivos functions.php<\/strong> de todos os temas do site (e n\u00e3o s\u00f3 no tema ativo) e se espalha por todos os sites wordpress dentro do servidor. Isso mesmo, uma instala\u00e7\u00e3o wordpress comprometida vai infectar outros sites de outros clientes que est\u00e3o instalados no mesmo servidor.<\/p>\nEle \u00e9 usado para fazer spam de SEO mas pode\u00a0ser usado para outras coisas tamb\u00e9m uma vez que abre caminho para a cria\u00e7\u00e3o de usu\u00e1rios administrativos diretamente no banco de dados.<\/p>\n
Como esse malware \u00e9 um tanto recente e n\u00e3o h\u00e1 muita informa\u00e7\u00e3o dispon\u00edvel na internet. Ent\u00e3o resolvi compilar um pouco do que encontrei, juntar com as minhas investiga\u00e7\u00f5es e explicar como se livrar dele.<\/p>\n
De onde vem?<\/h3>\n
Esse c\u00f3digo malicioso aparece, vindo de plugins e temas instalados de fontes n\u00e3o confi\u00e1veis (conhecidos como “nulled plugins”). Sites que diponibilizam gratuitamente o download de plugins premiuns\/pagos e que, geralmente, adicionam trechos de c\u00f3digos maliciosos.<\/p>\n
N\u00e3o vou linkar nenhum dos sites maliciosos justamente para n\u00e3o ajudar a espalhar a praga. Mas tenha em mente que,\u00a0sites que prometem gratuitamente plugins e temas que s\u00e3o pagos, geralmente carregam esse tipo de c\u00f3digo malicioso!<\/p>\n
Pra ser sincero, n\u00e3o sei qual a necessidade de instalar um plugin “pirata” no sistema. Se voc\u00ea precisa tanto do tal plugin, porqu\u00ea n\u00e3o apoiar seu desenvolvedor e COMPRAR A LICEN\u00c7A?! <\/strong>Desculpa o desabafo.<\/p>\nAo ativar um plugin desses, um c\u00f3digo malicioso \u00e9 executado adicionando arquivos, injetando c\u00f3digos, criando tabelas e abrindo a brecha para que o hacker (i)respons\u00e1vel tenha acesso ilimitado ao sistema.<\/p>\n
Sinais do ataque<\/h3>\n
Os ind\u00edcios de que seu site foi infectado com esse c\u00f3digo s\u00e3o:<\/p>\n
\n- Inje\u00e7\u00e3o de um bloco de c\u00f3digo em todos os arquivos functions.php<\/strong> de todos os temas do site (em todos os temas, n\u00e3o apenas no tema ativo);<\/li>\n
- Cria\u00e7\u00e3o da tabela wp_datalist<\/strong> no banco de dados do sistema;<\/li>\n
- Cria\u00e7\u00e3o dos\u00a0arquivos\u00a0wp.class.php<\/strong> and wp-cd.php<\/strong> na pasta \/wp-includes<\/strong>;<\/li>\n
- Inclus\u00e3o de c\u00f3digo malicioso no arquivo wp-includes\/post.php<\/strong>;<\/li>\n
- Acessos de um usu\u00e1rio administrador que n\u00e3o \u00e9 o seu. (Se voc\u00ea tem algum log de acessos ao site, fica mais f\u00e1cil verificar isso. Recomento o:\u00a0Sucuri Security Plugin<\/a>).<\/li>\n<\/ol>\n