Today we have found that in a php forum, someone was posting spam messages. It was obvious in this particular case, because it was a Spanish forum, and the message was in English. Notice that it uses the "guest" account ("invitado").
[Imageattachment]It sounded quite suspicious, so we tested the url and found that it was using web attacker exploits to install Trojan horses (Trj/Abwiz, Trj/Cimuz). Usually these are password stealers. But it could be other type of malware.
It could be possible that they are using some program to try to post in non restricted forums. So once again be careful before you follow a link from an unknown source.
If you are an administrator, it would be advisable, to check the configuration of your php application. If you allow anonymous posting, your forums could end filled with spam.
Thanks to Vicen for the information.
Panda Security specializes in the development of endpoint security products and is part of the WatchGuard portfolio of IT security solutions. Initially focused on the development of antivirus software, the company has since expanded its line of business to advanced cyber-security services with technology for preventing cyber-crime.
