PHP.net hacked to serve exploits

On 24 Oct 2013 06:15:39 +0000 Google started saying www.php.net was hosting malware. The Google Webmaster Tools were initially quite delayed in showing the reason why and when they did it looked a lot like a false positive because there were some minified/obfuscated javascript being dynamically injected into userprefs.js. This looked suspicious, but it was… Continue reading PHP.net hacked to serve exploits