Infected security page?

[wilbury at opencsw.org]

Folks,

one user on IRC reported that there is some javascript being injected from our security page (https://www.opencsw.org/security/ <https://www.opencsw.org/security/>)

The javascript reads:

<a href="http://www.jolietta.com/ <http://www.jolietta.com/>">jolietta online casino</a></div><script type="text/javascript">document.getElementById("8e4b83".split("").reverse().join("")).style.display = "none"</script>

It’s visible in source code, but not displayed with javascript enabled.

Can someone please take a look? I don’t seem to have access to www (if I should have, just drop me a note.)

thanks

—
Juraj Lutter
wilbury at opencsw.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/maintainers/attachments/20161016/0aeb0b95/attachment.html>