Arrgh.

Phishing Scam

You might be reading this because you clicked on some email pretending to be from PayPal. It was not.  It was email from a Phishing Scam. You might also be reading this because you clicked on a link to a gallery image on my site. Sadly I had nothing to do with this, my computer system* was subverted and/or broken into and some illicit software and web pages pretending to be PayPal were installed. If you have already been to this site and filled out any personal information, please contact PayPal security as soon as possible.

Some 1337 h4x0r5* have found an exploit in one of the PHP scripts I run on this site and have staged a phishing attack impersonating PayPal. Arrgh again!

I suppose I have a long road of reconstruction and lock-down ahead. Mildly interesting, but terribly inconvenient at this point in time. My photo gallery is offline until further notice since it was damaged during the attack.

* Or virtual computer system.

**‘leet Haxor – Elite Hacker (yeah, right)

Start uga_insert_html_once: head, Footer hooked: HTML inserted: Location is HEAD Start uga_get_option: footer_hooked uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: footer_hooked (1) End uga_insert_html Ending uga_wp_head_track: Start uga_filter:

Arrgh.

Phishing Scam

You might be reading this because you clicked on some email pretending to be from PayPal. It was not.  It was email from a Phishing Scam. You might also be reading this because you clicked on a link to a gallery image on my site. Sadly I had nothing to do with this, my computer system* was subverted and/or broken into and some illicit software and web pages pretending to be PayPal were installed. If you have already been to this site and filled out any personal information, please contact PayPal security as soon as possible.

Some 1337 h4x0r5* have found an exploit in one of the PHP scripts I run on this site and have staged a phishing attack impersonating PayPal. Arrgh again!

I suppose I have a long road of reconstruction and lock-down ahead. Mildly interesting, but terribly inconvenient at this point in time. My photo gallery is offline until further notice since it was damaged during the attack.

* Or virtual computer system.

**‘leet Haxor – Elite Hacker (yeah, right)

Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Calling preg_replace_callback: ]*?)href\s*=\s*['"](.*?)['"]([^>]*)>(.*?) Start uga_preg_callback: Array Get tracker for relative (and thus internal) url Start uga_track_internal_url: /images/phishing.jpg, 1 Start uga_get_option: track_files uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_files (1) Tracking files enabled Start uga_get_option: track_extensions uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_extensions (gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc) Checking file extension gif Checking file extension jpg File extension found Relative URL Removed starting slash from url: images/phishing.jpg Start uga_get_option: prefix_file_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_file_links (/downloads/) Checking file extension jpeg Checking file extension bmp Checking file extension png Checking file extension pdf Checking file extension mp3 Checking file extension wav Checking file extension phps Checking file extension zip Checking file extension gz Checking file extension tar Checking file extension rar Checking file extension jar Checking file extension exe Checking file extension pps Checking file extension ppt Checking file extension xls Checking file extension doc Ending uga_track_internal_url: /downloads/images/phishing.jpg Adding onclick attribute for /downloads/images/phishing.jpg Ending uga_preg_callback: Phishing Scam Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: en.wikipedia.org/wiki/Phishing Start uga_is_url_internal: en.wikipedia.org/wiki/Phishing Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Ending uga_is_url_internal: Get tracker for external URL Start uga_track_external_url: en.wikipedia.org/wiki/Phishing Start uga_get_option: track_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_ext_links (1) Tracking external links enabled Start uga_get_option: prefix_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_ext_links (/outgoing/) Ending uga_track_external_url: en.wikipedia.org/wiki/Phishing Ending uga_track_full_url: /outgoing/en.wikipedia.org/wiki/Phishing Adding onclick attribute for /outgoing/en.wikipedia.org/wiki/Phishing Ending uga_preg_callback: Phishing Scam Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: www.paypal.com/cgi-bin/webscr?cmd=_vdc-security-spoof-outside Start uga_is_url_internal: www.paypal.com/cgi-bin/webscr?cmd=_vdc-security-spoof-outside Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Ending uga_is_url_internal: Get tracker for external URL Start uga_track_external_url: www.paypal.com/cgi-bin/webscr?cmd=_vdc-security-spoof-outside Start uga_get_option: track_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_ext_links (1) Tracking external links enabled Start uga_get_option: prefix_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_ext_links (/outgoing/) Ending uga_track_external_url: www.paypal.com/cgi-bin/webscr?cmd=_vdc-security-spoof-outside Ending uga_track_full_url: /outgoing/www.paypal.com/cgi-bin/webscr?cmd=_vdc-security-spoof-outside Adding onclick attribute for /outgoing/www.paypal.com/cgi-bin/webscr?cmd=_vdc-security-spoof-outside Ending uga_preg_callback: PayPal security Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: php.net/ Start uga_is_url_internal: php.net/ Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Ending uga_is_url_internal: Get tracker for external URL Start uga_track_external_url: php.net/ Start uga_get_option: track_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_ext_links (1) Tracking external links enabled Start uga_get_option: prefix_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_ext_links (/outgoing/) Ending uga_track_external_url: php.net/ Ending uga_track_full_url: /outgoing/php.net/ Adding onclick attribute for /outgoing/php.net/ Ending uga_preg_callback: PHP Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: en.wikipedia.org/wiki/Phishing Start uga_is_url_internal: en.wikipedia.org/wiki/Phishing Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Ending uga_is_url_internal: Get tracker for external URL Start uga_track_external_url: en.wikipedia.org/wiki/Phishing Start uga_get_option: track_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_ext_links (1) Tracking external links enabled Start uga_get_option: prefix_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_ext_links (/outgoing/) Ending uga_track_external_url: en.wikipedia.org/wiki/Phishing Ending uga_track_full_url: /outgoing/en.wikipedia.org/wiki/Phishing Adding onclick attribute for /outgoing/en.wikipedia.org/wiki/Phishing Ending uga_preg_callback: phishing attack Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: paypal.com/ Start uga_is_url_internal: paypal.com/ Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Ending uga_is_url_internal: Get tracker for external URL Start uga_track_external_url: paypal.com/ Start uga_get_option: track_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_ext_links (1) Tracking external links enabled Start uga_get_option: prefix_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_ext_links (/outgoing/) Ending uga_track_external_url: paypal.com/ Ending uga_track_full_url: /outgoing/paypal.com/ Adding onclick attribute for /outgoing/paypal.com/ Ending uga_preg_callback: PayPal Ending uga_filter:

Arrgh.

Phishing Scam

You might be reading this because you clicked on some email pretending to be from PayPal. It was not.  It was email from a Phishing Scam. You might also be reading this because you clicked on a link to a gallery image on my site. Sadly I had nothing to do with this, my computer system* was subverted and/or broken into and some illicit software and web pages pretending to be PayPal were installed. If you have already been to this site and filled out any personal information, please contact PayPal security as soon as possible.

Some 1337 h4x0r5* have found an exploit in one of the PHP scripts I run on this site and have staged a phishing attack impersonating PayPal. Arrgh again!

I suppose I have a long road of reconstruction and lock-down ahead. Mildly interesting, but terribly inconvenient at this point in time. My photo gallery is offline until further notice since it was damaged during the attack.

* Or virtual computer system.

**‘leet Haxor – Elite Hacker (yeah, right)

Start uga_filter: Alan Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Calling preg_replace_callback: ]*?)href\s*=\s*['"](.*?)['"]([^>]*)>(.*?) Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: polyphase.ca/ Start uga_is_url_internal: polyphase.ca/ Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Match found, url is internal Ending uga_is_url_internal: 1 Get tracker for internal URL Start uga_track_internal_url: polyphase.ca/, Start uga_get_option: track_files uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_files (1) Tracking files enabled Start uga_get_option: track_extensions uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_extensions (gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc) Checking file extension gif Checking file extension jpg Checking file extension jpeg Checking file extension bmp Checking file extension png Checking file extension pdf Checking file extension mp3 Checking file extension wav Checking file extension phps Checking file extension zip Checking file extension gz Checking file extension tar Checking file extension rar Checking file extension jar Checking file extension exe Checking file extension pps Checking file extension ppt Checking file extension xls Checking file extension doc Ending uga_track_internal_url: Ending uga_track_full_url: Ending uga_preg_callback: Alan Ending uga_filter: Alan Start uga_filter: Jeffrey Fredrick Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Calling preg_replace_callback: ]*?)href\s*=\s*['"](.*?)['"]([^>]*)>(.*?) Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: blog.jeffreyfredrick.com Start uga_is_url_internal: blog.jeffreyfredrick.com Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Ending uga_is_url_internal: Get tracker for external URL Start uga_track_external_url: blog.jeffreyfredrick.com Start uga_get_option: track_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_ext_links (1) Tracking external links enabled Start uga_get_option: prefix_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_ext_links (/outgoing/) Ending uga_track_external_url: blog.jeffreyfredrick.com Ending uga_track_full_url: /outgoing/blog.jeffreyfredrick.com Adding onclick attribute for /outgoing/blog.jeffreyfredrick.com Ending uga_preg_callback: Jeffrey Fredrick Ending uga_filter: Jeffrey Fredrick Start uga_filter: Jason L. Froebe Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Calling preg_replace_callback: ]*?)href\s*=\s*['"](.*?)['"]([^>]*)>(.*?) Start uga_preg_callback: Array Get tracker for full url Start uga_track_full_url: froebe.net/blog Start uga_is_url_internal: froebe.net/blog Start uga_get_option: internal_domains uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: internal_domains (polyphase.ca) Checking hostname polyphase.ca Ending uga_is_url_internal: Get tracker for external URL Start uga_track_external_url: froebe.net/blog Start uga_get_option: track_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: track_ext_links (1) Tracking external links enabled Start uga_get_option: prefix_ext_links uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: prefix_ext_links (/outgoing/) Ending uga_track_external_url: froebe.net/blog Ending uga_track_full_url: /outgoing/froebe.net/blog Adding onclick attribute for /outgoing/froebe.net/blog Ending uga_preg_callback: Jason L. Froebe Ending uga_filter: Jason L. Froebe Start uga_filter: Adam Roach Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Calling preg_replace_callback: ]*?)href\s*=\s*['"](.*?)['"]([^>]*)>(.*?) Ending uga_filter: Adam Roach Start uga_filter: Loquitus Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Calling preg_replace_callback: ]*?)href\s*=\s*['"](.*?)['"]([^>]*)>(.*?) Ending uga_filter: Loquitus Start uga_wp_footer_track: Start uga_get_tracker Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Start uga_get_option: account_id uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: account_id (UA-239920-1) Ending uga_get_tracker: Start uga_insert_html_once: footer, Footer hooked: HTML inserted: Location is FOOTER Inserting HTML End uga_insert_html Ending uga_wp_footer_track: Start uga_shutdown Start uga_in_feed Ending uga_in_feed: Start uga_track_user Start uga_get_option: ignore_users uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: ignore_users () Tracking user with level Ending uga_track_user: 1 Footer hook was executed Start uga_get_option: footer_hooked uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: footer_hooked (1) Start uga_get_option: debug uga_options: array ( 'internal_domains' => 'polyphase.ca', 'account_id' => 'UA-239920-1', 'enable_tracker' => true, 'track_adm_pages' => true, 'ignore_users' => false, 'max_user_level' => '8', 'footer_hooked' => true, 'filter_content' => true, 'filter_comments' => true, 'filter_comment_authors' => true, 'track_ext_links' => true, 'prefix_ext_links' => '/outgoing/', 'track_files' => true, 'prefix_file_links' => '/downloads/', 'track_extensions' => 'gif,jpg,jpeg,bmp,png,pdf,mp3,wav,phps,zip,gz,tar,rar,jar,exe,pps,ppt,xls,doc', 'track_mail_links' => true, 'prefix_mail_links' => '/mailto/', 'debug' => true, 'check_updates' => true, 'version_sent' => '1.6.0', 'advanced_config' => true, ) Ending uga_get_option: debug (1) -->