Auctiva infected with Trojan virus

Comments

• I would like to give you all current status update on this issue and a bit more on what occurred late last week.
  
  We discovered the presence of malware on a few of the Auctiva.com servers on February 19th. This caused Google to flag Auctiva as a dangerous site. Our Systems Engineers identified the location of the malware and immediately took the infected servers offline. We worked to correct security vulnerabilities and eliminate the possibility of further infection. We resolved to only bring the site back online once we were confident we could provide the same high level of safety and security for our customers that we have for the past 10 years.
  
  In the early morning hours of Tuesday the 24th, we brought Auctiva.com back online with a reduced number of servers, and are in the process of adding more to our network to improve site speed.
  
  Facts:
  • Auctiva is a 10-year old software company comprising several Web sites and products. With more than 80 employees and hundreds of thousands of registered users, Auctiva remains a trusted eBay partner posting millions of eBay listings every month.
  • Auctiva takes the issue of security very seriously. We temporarily took the site offline while we worked to correct security vulnerabilities and eliminate the possibility of further infection. We committed to only bring the site back up once we were confident we could provide a high level of confidence in the safety and security of our site for our users.
  • As a company, we strived to handle this issue in a candid, responsive and responsible manner. Updates have been available throughout the course of this issue at http://community.auctiva.com/eve/forums/a/frm/f/1081020411 and this user forum is where we will continue to inform our users with future news/updates.
  • Throughout this process, users’ listings, images, templates and scrolling galleries remained available.
  • eBay Security Teams are helping Auctiva to ensure the strictest level of safety and security on Auctiva.com. eBay has been closely working with us on this matter to thoroughly ensure users are not affected by this sort of malware intrusion again.
  • Existing Threat? After the threat was identified late last week, we took the appropriate and responsible corrective action. Normal operation has since been restored and there is no risk to users visiting any portion of the Auctiva.com site.
  
  If there’s a concern about the security of our forums: Our discussion forums were always safe to visit. The forums (http://community.auctiva.com/eve/forums/a/frm/f/1081020411) are hosted on different servers than Auctiva.com and were never compromised.
  
  Similar attacks have been made on other large Web sites recently that used the same methodology for malicious code injection. Other targets have included:
  • CBS (http://www.pcworld.idg.com.au/article/269283/cbs_website_bitten_by_iframe_hack?fp=512&fpid=1871683061&rid=1)
  • Monster.com (http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9048019)
  
  I would be happy to answer any questions or clarifications you may have. Auctiva considers this matter our top priority and would like to ensure our user base, and the public at large, that we are, and will remain, a trusted eBay partner. Thank you for your time, have a good afternoon.
  
  Daniel J. Buchner
  Product Manager
  Auctiva Corp.
  Posted by Daniel J. Buchner, USA
• Have noticed that my scrolling gallery lost colors. And when I went to Auctiva site there appeared to be less options to change colors for different parts of the gallery window. Is this the case? And if so why would you reduce the amount of customization possible?
  
  Neil Posted by Neil, USA