tag:blogger.com,1999:blog-24069595.post3001810370800580183..comments2024-03-27T04:17:20.550-07:00Comments on The Real Blogger Status: Blogger Blogs Redirecting To "kunoichi . info"Nitecruzrhttp://www.blogger.com/profile/08069634565746003311noreply@blogger.comBlogger8125tag:blogger.com,1999:blog-24069595.post-63503712160988124742012-09-18T14:30:57.813-07:002012-09-18T14:30:57.813-07:00Globus,
You will be at the end of a very long lin...Globus,<br /><br />You will be at the end of a very long line.Nitecruzrhttps://www.blogger.com/profile/08069634565746003311noreply@blogger.comtag:blogger.com,1999:blog-24069595.post-24909504120659059322012-09-18T11:04:35.867-07:002012-09-18T11:04:35.867-07:00good post, which globus found useful. thanks.good post, which globus found useful. thanks.Globushttps://www.blogger.com/profile/11270255108587219686noreply@blogger.comtag:blogger.com,1999:blog-24069595.post-46054761828652355322012-08-24T10:16:30.997-07:002012-08-24T10:16:30.997-07:00Thanks a lot I just recovered my blog using ur hel...Thanks a lot I just recovered my blog using ur help<br />Sid Fadnishttps://www.blogger.com/profile/00979117375411907756noreply@blogger.comtag:blogger.com,1999:blog-24069595.post-70968601383896199942012-08-02T22:55:23.592-07:002012-08-02T22:55:23.592-07:00Thank you SO much for the fix. I had no idea what...Thank you SO much for the fix. I had no idea what to do. You responded so quickly too. Thanks again!!Cindeehttps://www.blogger.com/profile/06029672615847256725noreply@blogger.comtag:blogger.com,1999:blog-24069595.post-75809185491467977182012-08-02T05:36:11.705-07:002012-08-02T05:36:11.705-07:00Ah, okay, that makes sense.
In my case, it was &...Ah, okay, that makes sense. <br /><br />In my case, it was "Recent Comments," so I had wondered if someone had left the code in a comment, which was then displayed on the page, causing the problem.<br /><br />Your explanation makes more sense, though - for the text of a comment to be able to hijack a blog would be a pretty big security hole!<br /><br />In any case, it's gone and now I know it won't happen again. Thanks!Jenniferhttps://www.blogger.com/profile/16453489879246452921noreply@blogger.comtag:blogger.com,1999:blog-24069595.post-79932945398901580762012-08-01T18:31:56.399-07:002012-08-01T18:31:56.399-07:00Jennifer,
You probably deleted a very useful soun...Jennifer,<br /><br />You probably deleted a very useful sounding gadget - typically the problem will be in "Recent Comments" / "Recent Posts" or maybe "Daily Calendar". When initially installed, the gadget will work just fine.<br /><br />What the hacker did is write the code, that you installed on your blog, so it references his personal code library. After his hacked gadgets had been installed by thousands of blog owners, the hacker updated his code, and it now redirects to "kunoichi . info".<br /><br />In a similar case, the hacker is advising people to read his blog. The article on his blog instructs people to remove the "bad" gadgets, and get updated gadgets from his personal library - not Google hosted.<br /><br />In effect, this guy is using the Google code library to advertise his personal expertise as a hacker.<br /><br />We have had this exploit twice, in the past. The first time, it took us like 6 months before <a href="http://blogging.nitecruzr.net/search/label/Blog%20Hijack%20-%202010" rel="nofollow">we noticed a pattern</a> - and we had hundreds of problem reports in the forums, when the gadgets matured. The second time, we knew what to look for - and this time, we were ready for the attack.<br /><br /><a href="http://blogging.nitecruzr.net/search/label/Blog%20Hijack%20-%202010" rel="nofollow">http://blogging.nitecruzr.net/search/label/Blog%20Hijack%20-%202010</a>Nitecruzrhttps://www.blogger.com/profile/08069634565746003311noreply@blogger.comtag:blogger.com,1999:blog-24069595.post-84994660732186420392012-08-01T14:58:11.323-07:002012-08-01T14:58:11.323-07:00Hey, thanks. My blog is dormant as far as new post...Hey, thanks. My blog is dormant as far as new posts, but I do go back to it to look at older things now and then. My BF discovered it had the Kunoichi redirect problem, and I found your post by Googling "blog hijacked to kunoichi.info".<br /><br />Your solution worked, and all is now well. What I would like to know is, how did the code get in there in the first place?<br /><br />In any case, thanks for the solution!<br />JenniferJenniferhttps://www.blogger.com/profile/16453489879246452921noreply@blogger.comtag:blogger.com,1999:blog-24069595.post-8800299577965475972012-07-28T04:57:11.999-07:002012-07-28T04:57:11.999-07:00Thanks. Just ran into this issue. In case someone ...Thanks. Just ran into this issue. In case someone runs into a similar problem. Couldn't find it in the Layout GUI for a while. Then stumbled across it when I edited the comments gadget.Andrejshttps://www.blogger.com/profile/13212064803235430083noreply@blogger.com