Originally Posted by TJ Mason

The Yorkshire Archery Association's website has been subjected to repeated attacks by hackers, and visiting the site could cause your computer to be infected with malware. This may also be the case with the Northern Counties, Lancashire and Durham & Northumberland sites.
The problem is that the hosting company has been infected, and all sites hosted by them are being attacked. I'll take the YAA and YAA Coaching sites down when able, but for the moment please avoid them.

Interesting. I heard this morning that West Midlands may have been hit, and also possibly Droitwich Archery Club, though I can't confirm either at the moment. Do you know (I assume you do) who is hosting the northern sites?

I'm not the administrator, so don't know who the hosting company is. I know it's ******* Windows-hosted, though - wouldn't have been my choice.

Originally Posted by TJ Mason

I'm not the administrator, so don't know who the hosting company is. I know it's ******* Windows-hosted, though - wouldn't have been my choice.

The attack (iframe injection) isn't too fussy, Tim, it's quite happy on Unix or Windows

Unix/Linux hosting tends to have better default security settings, though. It looks like the worm was able to rip through the servers because most sites had low security settings.

Our Killingworth Archery site is currently unavailable so suspect we have the same problem (Northumberland & Durham, UK area)

Yep, we44, you do. Your webmaster needs to remove the <iframe> tag at the bottom of all the site pages.

The YAA site is now clean, shaved, sober and back online. Well...hard to be entirely trustful of Openhosting.co.uk (for it is they), so I'll keep the alternative site going as well.

Openhosting has been hacked again, so the site's dodgy again. I'll be amazed if Openhosting stays in business after this.

Originally Posted by TJ Mason

Openhosting has been hacked again, so the site's dodgy again. I'll be amazed if Openhosting stays in business after this.

If you need somewhere to host the YAA site Tim, let me know.

Just been advised that people are getting threat warnings when visiting the YAA's .co.uk site. So it looks like the web hosting company has been hacked again. Presumably the NCAS, YAA Coaching, Durham & Northumberland, Cumbria and other sites will be affected.
If you need to use the YAA site, please go to the .org.uk version:
Yorkshire Archery Association - home

Originally Posted by TJ Mason

Unix/Linux hosting tends to have better default security settings, though. It looks like the worm was able to rip through the servers because most sites had low security settings.

Completely off-topic, and coincidental, bu I have just been watching "Tremors"