On Tue, Mar 5, 2013 at 8:25 PM, Andy Smith <andy@???> wrote:
> On Tue, Mar 05, 2013 at 07:23:46PM +0000, Andy Smith wrote:
>> RewriteRule ^(.*) http:// crzyluxtds in/go.php?sid=1 [L,R=302]
>
> Quite a few people rejected this email, probably because of the
> above URL (now obfuscated as I should have done before). If you did,
> you can find the original in the archives:
>
> http://lists.bitfolk.com/lurker/message/20130305.192346.4455264a.en.html
Do we know which version of WordPress was compromised?
And that it was definitely WordPress not another service?
