Gootloader infection cleaned up

Dear blog owner and visitors,

This blog had been infected to serve up Gootloader malware to Google search victims, via a common tactic known as SEO (Search Engine Optimization) poisioning. Your blog was serving up 394 malicious pages. Your blogged served up malware to 76 visitors.

I tried my best to clean up the infection, but I would do the following:

  • Upgrade WordPress to the latest version (one way the attackers might have gained access to your server)
  • Upgrade all WordPress themes to the latest versions (another way the attackers might have gained access to your server)
  • Upgrade all WordPress plugins (another way the attackers might have gained access to your server), and remove any unnecessary plugins.
  • Verify all users are valid (in case the attackers left a backup account, to get back in)
  • Change all passwords (for WordPress accounts, FTP, SSH, database, etc.) and keys. This is probably how the attackers got in, as they are known to brute force weak passwords
  • Run antivirus scans on your server
  • Block these IPs (5.8.18.7 and 89.238.176.151), either in your firewall, .htaccess file, or in your /etc/hosts file, as these are the attackers command and control servers, which send malicious commands for your blog to execute
  • Check cronjobs (both server and WordPress), aka scheduled tasks. This is a common method that an attacker will use to get back in. If you are not sure, what this is, Google it
  • Consider wiping the server completly, as you do not know how deep the infection is. If you decide not to, I recommend installing some security plugins for WordPress, to try and scan for any remaining malicious files. Integrity Checker, WordPress Core Integrity Checker, Sucuri Security,
    and Wordfence Security, all do some level of detection, but not 100% guaranteed
  • Go through the process for Google to recrawl your site, to remove the malcious links (to see what malicious pages there were, Go to Google and search site:your_site.com agreement)
  • Check subdomains, to see if they were infected as well
  • Check file permissions

Gootloader (previously Gootkit) malware has been around since 2014, and is used to initally infect a system, and then sell that access off to other attackers, who then usually deploy additional malware, to include ransomware and banking trojans. By cleaning up your blog, it will make a dent in how they infect victims. PLEASE try to keep it up-to-date and secure, so this does not happen again.

Sincerly,

The Internet Janitor

Below are some links to research/further explaination on Gootloader:

https://news.sophos.com/en-us/2021/03/01/gootloader-expands-its-payload-delivery-options/

https://news.sophos.com/en-us/2021/08/12/gootloaders-mothership-controls-malicious-content/

https://www.richinfante.com/2020/04/12/reverse-engineering-dolly-wordpress-malware

https://blog.sucuri.net/2018/12/clever-seo-spam-injection.html

This message

Introducing Mamacat

Hello. I’m Mamacat. I grew up in the middle of nowhere in west Texas. As a teen I was a little party kitty who loved to do makeup and cut hair(my background is working for ulta/benefit and having my cosme license). I also skated, had many adventures with my cousins, and went to our local diy music venue at least once a week. One day while out for lunch at school I met my future husband. Then a couple of months later through someone else I ended up at his apartment and it started our best friendship (he doesn’t even remember *sigh*). our best friendship grew for 4 and a half years before we made it official. 8 months later on April 1st, 2015 we found out we were expecting! While I was pregnant I joined a mom-to-be forum and met my fellow weasels that became my forever friends who kept me from spending days being lonely at home. Our little shrimp was born on December 3rd, 2015 and so began my journey as a stay at home mom.

Introducing MotherofSatan

My name is Gabi, pronounced Gah-bee not Gabby, short for Gabriela. I currently live in Kentucky. I was adopted from Romania as a wee babe and grew up in Alabama. No one would ever guess I can’t run for president because I sound like a hillbilly, but I assure you, I cannot read my own birth certificate. I met my husband, Chris, of five years at the University of Alabama (Roll Tide) and last year we decided on a whim to try for a baby. Were we ready financially? No, because realistically, who is? Was my biological clock ticking? Yes.

So it happened and I joined a popular baby forum where I met my weasel friends who have helped me do this momming thing every step of the way. My son was born in December 2015 and we call him Tiny Satan. It really is a term of endearment, and a joke because of his middle name meaning Devil. My mother was firmly against his Romanian middle name, so in jest, he is my Tiny Satan.

In my free time of not changing diapers and soothing a teething baby, I play and write music, binge watch tv and enjoy the occasional long, hot shower (Let’s be real here, those are a luxury as a new mom). I am lucky enough to be a stay at home mom and my weasels keep my sanity. So much baby talk with no adult interaction can drive a person insane.

I look forward to this adventure with my fellow weasels and the hopes of doing more adult oriented things!

Introducing Nate

Hey, I’m Nate. Not really but we will pretend that is my name.

I’m a 23 year old mother of 4 beautiful children. I was born, raised, and currently reside within the land of the corn and soy beans. (Some might call it southern Indiana)

I am a nerdy mama with a nerdy husband and nerdy kids. I live within many nerd fandoms but my favorite by far is Kingdom Hearts. Many Anime Fandoms follow behind.

My husband and I met in highschool through mutual gamer friends. He was an Xbox gamer and I was a Playstation gamer. Against all odds I decided to not kill the man during our console debates and instead fell in love. (Oh, yes, ultra romantic) We have been together 7 or 8 years but have only been married a year and a half due to postponing our wedding for eons.

Although my love for Kingdom Hearts runs deep I’d not call myself a gamer anymore. I honestly don’t have the time. When I do sit down to vegetate I watch anime instead of gaming. That way I’m not required to use any brain power what’s so ever. (Also I’m less likely to yell at the television screen)

In March 2015 I discovered I was pregnant again with my 4th child. I decided to join a popular baby/pregnancy site because why not? While cruising through the site I met some of the most amazing expectant mothers. A small group of us got extremely close. I am beyond proud to say that they have become some of my best friends despite not meeting yet. We all have various talents and abilities. I’ve learned much from the Weasel Mamas. So we all thought maybe others would and so benefit from our experiences as well. Thus Weasel Tube was born.

I don’t really know if anything I do in my day to day life would count as fun or interesting to others. However if I magically do something cool I’ll make a video to show you guys.

I’ll likely blog about extreme grocery budgeting, easy/practical dinner recipes, allergy friendly foods, surviving 3 kids under 3, how to live despite being “poor”, and whatever else I desire.

I look foward to the possibility of being able to help anyone who follows the blog. (Or who ever found this via Google search, haha)

— ❤❤ Nate

Introducing Babiicakes

Hello everyone, I was born in Brooklyn NY and raised in the south. My husband is a cross country truck driver and I am a nurse. We currently live in eastern NC, with hopes of buying a house in the next few years. I have an awesome and adorable step-son, and I became a first time mom in December of 2015.

I spend a lot of time attempting to balance motherhood, marriage, school, and work. (When I a schedule that gives me more than 4 hours of sleep I will let you guys know.) I enjoy video games, baking and documentaries. I “fangirl” over too much to mention.

I’m excited to be a part of our diverse group of weasels and share the things I have learned.

Recipe: Barbecue Chicken Braid

Being a new mother means I spend a lot of time holding a baby and leaning on my phone (and subsequently, Facebook) to communicate with the outside world. An ongoing trend has been people sharing how-to recipe videos by places like Tasty and BuzzFeed, and boy do I love those. Not only do I love them, I love experimenting and making them my own. One day I saw a video for a pizza braid. It was pizza crust, pepperoni, cheese and sauce. I decided to use sausage instead of pepperoni and it turned out great. Then I decided to try a taco braid, with taco seasoned ground beef, salsa and cheese. It was just as delicious.

I am here today to tell you about neither of these. It will be easy enough for you to figure out how to alter it to your liking if you want to try them later. The one I’m making today is one I could only try when my dearest husband was in Canada, because he doesn’t like chicken. I love chicken. Even more, I love taking a rotisserie chicken that I pick up from Kroger and turning it into something special. That’s just what I did today.

barbecue chicken recipe

This is easy, fun, and you can even get kids to help you. If, you know, they’re mobile. As for me, I got help in the form of a baby who talked and chattered to me the whole time. I win.

BARBECUE CHICKEN BRAID
difficulty: easy

INGREDIENTS
1 roll pizza crust dough
1 rotisserie chicken meat without skin, shredded and/or chopped
1 tsp garlic powder
1 tsp cumin
1 tsp chili powder
salt and pepper to taste
barbecue sauce to taste
3 green onions, chopped (white and green parts)
1 1/2 cups + 1/2 cup shredded cheese

First things first. Preheat your oven to 400 and line a baking sheet with parchment paper. Roll out the dough as thin as you can get it until it covers most of the sheet. You don’t want it to be too thick or it won’t get very done on the inside and that’s kind of gross.

barbecue chicken recipe

Mix the chicken with the spices and as much barbecue sauce as you want. More will obviously make it saucier, so it depends on whether you want it dry or what. Then spread all but about 1/2 cup of the mixture on the middle third (lengthwise) of the pizza crust. Sprinkle the green onions on top of there, then cover with 1 1/2 cups shredded cheese. You can use whatever you like. I opted for cheddar, though a cheddar jack or pepper jack would be good too.

barbecue chicken recipe

Once it’s all piled on, slice small lines on one side of the pizza dough, like the picture below. Then turn it around and you will start to do the other side. I actually do the second side as I braid so I have the same amount of ribbons to braid, but I suppose you could count too.

barbecue chicken recipe

Now it’s time to braid. You will cut the end ribbons off of the end, leaving only the middle piece that will be folded over and start the braid. Then just fold the ribbons over each other from each side like so:

barbecue chicken recipe

Once you get to the end, you won’t use the last two ribbons but will cut them and fold the end piece over, and it will look like this:

barbecue chicken recipe

Bake for fifteen minutes or until it’s golden brown and bubbly. You won’t regret this. Slice it up with a pizza cutter and serve nice and warm!

barbecue chicken recipe