Technology Sucks. (Well, Sometimes, Anyway.)
Hey, folks — I just wanted to poke my head up briefly to mention a couple of SCR-related things that have been going on behind-the-scenes, to let everybody know in case they themselves have run into ’em.
First off, the website was hacked over the weekend, which meant that yours truly got to spend his birthday evening frantically installing WordPress security plugins and trawling through files to look for bogus code. Argh. If you tried searching for SCR via Google, you would’ve been sneakily redirected to a site promising to sell you Windows OS keys, which, obviously, is not what was supposed to be happening.
As far as I’m able to tell, the issue has now been fixed, so you should be able to view our little Website with no problems. I want to give a big, big thank-you to the awesome Stephen Wells (of the excellent Birthday Club), by the way, for letting us know that this was going on, because otherwise it could’ve gone on a whole lot longer. With him sounding the alarm, though, it appears that the site was only compromised for about 24 hours, which is far better than the alternative. Thanks, Stephen!
Now, in the interest of full disclosure, we were hit by the same exact type of attack about a month and a half ago. At the time, I thought I’d gotten rid of the offending plugin (which had mysteriously been installed in our WordPress setup, despite me definitely not installing it), and that was that. Apparently that wasn’t the case. sigh.
We’re taking some more serious measures to fully root this thing out now, but if you do notice any weirdness with the site, please let us know, either by Facebook message or email (gaijin at spacecityrock dot com). The site definitely should not be down or inaccessible, for any reason; despite the relative quiet these past several months, we’re still here, I promise.
To make things even more fun, in-between these two attacks, our email was also hacked recently. About a week ago, we started seeing a massive number of return-to-sender email notifications, even though we hadn’t been sending any emails in the previous day or so.
After doing some cleanup and locking down some old accounts, it looks like we’ve addressed this issue, as well, but if you get any weird emails claiming to be from anyone at Space City Rock, do not open any attachments or click on any links those emails contain. And again, please let us know — we absolutely do not want to see any of our friends, supporters, readers, etc., harmed because of this.
That’s about it for now; I’ll post further updates if things change. Thanks for listening…
Leave a Reply