this is incredible the game is DRM free so no crack is needed and people is looking for same people not for crack, but just to make connection with those with whome they feel connected. This is the real reason why crackwatch.com is down
WordPress redirect malware ataking stm Motors theme
one day i sow that my testing site is redirecting with enabled plugin stm_vehicles_listing is redirecting to something like this
a.robotcaptcha6.info fox.trackstatisticsss.com joinsilverclubbb.com
Like always to track adn remove malware from wordpress i update wordpress to the latestes version ( or just press reinstall if you are one the latestet allready)
Second step update theme files
and finaly update all plugins,
AND…. all thees steps did not solved my problem the web page was still redirecting
i checked .htaccess ir was clean
wp-confing.php – clean
i was seaching and i found nothing in files, JavaScrip files and so on
so it must be not in files but it have to be in database, i searched for TRACKSTATISTICSSS in all datebase an i get only one row… that was so pleasent, finale i got it
it was in wp_option table
28 628 length..
Solution
- connect to phpmyadmin
- in sql enter script below
that is my search script you can use it
SELECT * FROM `c1aps4`.`wp_options` WHERE (CONVERT(`option_id` USING utf8) LIKE '%<SCRIPT%' OR CONVERT(`option_name` USING utf8) LIKE '%<SCRIPT%' OR CONVERT(`option_value` USING utf8) LIKE '%<SCRIPT%' OR CONVERT(`autoload` USING utf8) LIKE '%<SCRIPT%') OR (CONVERT(`option_id` USING utf8) LIKE '%TYPE=TEXT/JAVASCRIPT%' OR CONVERT(`option_name` USING utf8) LIKE '%TYPE=TEXT/JAVASCRIPT%' OR CONVERT(`option_value` USING utf8) LIKE '%TYPE=TEXT/JAVASCRIPT%' OR CONVERT(`autoload` USING utf8) LIKE '%TYPE=TEXT/JAVASCRIPT%') OR (CONVERT(`option_id` USING utf8) LIKE '%SRC=\'HTTPS://COUNT.TRACKSTATISTICSSS.COM/STM?V=L&V=4\'>%' OR CONVERT(`option_name` USING utf8) LIKE '%SRC=\'HTTPS://COUNT.TRACKSTATISTICSSS.COM/STM?V=L&V=4\'>%' OR CONVERT(`option_value` USING utf8) LIKE '%SRC=\'HTTPS://COUNT.TRACKSTATISTICSSS.COM/STM?V=L&V=4\'>%' OR CONVERT(`autoload` USING utf8) LIKE '%SRC=\'HTTPS://COUNT.TRACKSTATISTICSSS.COM/STM?V=L&V=4\'>%')
One more scam usinf Facebook Ads and shopify as proxy to scam page
Ad on facebook
after shopify shop as proxy ( it redirects to scam page )
and finlay scam page
they collecting emals
I saw this for the first time
SCAM on youtube with live stream lots of channels crreated with one video
its scammed or hacked accounts with deleted all vodes streaming one video scam that bill gates is asking for bicoins
this is bad news for those whome accounts been scammed or hacked.
i would like to have possibility to report videos or live stream videos
web site states that just give us money and bill gates will double, they trying to play then virus is out there
SCAM SITE https://billgatesdev.tech/
At this moment is all in youtube hands
i hope that google will try to stop this stream as fast as posible
i chatted with one owener of the scammed channel, he meneged to get back his acount and report issue with with that scam but google did nothing about that
i reported that site to microsft becouse its it using microsft name and logo. hope they will down that site
we need tool to stop that activity
One more facebook scam ad with elon musk
lots of scams in FB
Scam Facebook ads
fake news site
Ads collecting your personal data
Facebook ads
I could be wrong but in my opinion theyr main goal is to collect phone number and after that sell database of numbers to scammers
How facebook and shopify tolerating this? or How to lose our facebook and maybe your paypal or nettler password
This just for redirecting site
You will be redirected to this site
in this site they asking yoo to enter you facebook details and your paypal, nettler password or IBAN number
the main goal i thinks is to get your paypal or nettler password, they hope that you are using the same email adress and the same password for all accounts,
the main problem that facebook and shopify doing nothing to protect theyr customers. so sad
Fake FB add with Marijonas Mikutavicius
and they missed the momen that Delfi changed site interface and logo
and this scam leads us to https://bitcoinrevolutionapps.com/
FB ad faking facebok libra thats fun
Facebook ad:
fake domain name https://dbook-stores.myshopify.com/
and your money go to those scammers