Update 18 May 2010:
Isn’t this fun?
I think everything is finally clean. If you’re curious, this is a little bit of information about the attack and the long-term ramifications. (Hopefully, this is the last I’ll have to mention; thanks to sucuri, I found that Norton had flagged my site as malicious/blacklisted. If you own and operate a website/blog, I don’t wish this on you.)
Update 17 May 2010:
I am very sorry for the downtime over the past few days. My site was hacked.
My host, 6sync, has been awesome in helping and supporting me through this. I highly, highly recommend them. They are a tremendous ally.
I suspect that I was hacked via a vulnerability in bluehost, my previous host. I’m in the process of cleaning my server and doing various things that have nothing to do with real estate or my clients, and this absolutely sucks. If I could sue the hackers who did this for pain and suffering and mental anguish, I absolutely would.
I know. We’ve removed the bad code and are waiting for Google to review my site.
This message will be deleted once Google sees that I’m running a clean site.
To the hacker(s): I hate you.
Um, well, I’m not getting any “attack site” warning from google…so I’d say you are good to go!
No fun, glad you’ve been able to get it under control.
Thanks, Scott. This has truly been a nightmare.
So, it is safe to be here? Was it from one of the many plug-ins like FB?
As safe as can be expected. 🙂 It wasn’t a plugin, it was a widespread attack across all the major hosting companies, as far as I can tell. I’ve spent more time looking at and for bogus hidden files on my server via ftp than I ever would have liked.
I really wouldn’t wish this on anyone other than the hackers.