Adobe Exploits Compromising Websites

LOS ANGELES — Computer security experts are issuing a warning about Adobe software exploits which are compromising the security of an increasing number of web servers and the sites that they host.

In a recent letter to its clients, adult web hosting provider MojoHost said that it had caught attacks at an early stage, before most of its customers encountered this problem.

"To give this scenario perspective, in the last week we have identified [several] clients where in the final analysis it was determined this exploit of client side software has been the culprit," stated a MojoHost representative.

The United States Computer Emergency Readiness Team is monitoring the situation and according to the US-CERT website, the attack is a drive-by-download exploit with multiple stages and is being referred to as "Gumblar."

"The first stage of this exploit attempts to compromise legitimate websites by injecting malicious code into them," stated a Team report. "Reports indicate that these website infections occur primarily through stolen FTP credentials but may also be compromised through poor configuration settings, vulnerable web applications, etc."

The exploit's second stage occurs when users visit a Gumblar-infected website.

"Users who visit these compromised websites and have not applied updates for known [Adobe] PDF and Flash Player vulnerabilities may become infected with malware," the Team report continued. "This malware may be used by attackers to monitor network traffic and obtain sensitive information, including FTP and login credentials that can be used to conduct further exploits."

"If you are not running the most recently patched versions of Adobe Acrobat and Adobe Flash Player, you are at risk for compromising your websites," the MojoHost rep said. "This poses a significant security risk to your server and websites, leading to attackers using client FTP credentials to deface websites and insert malicious code which can exploit things further."

The Team report also states that Gumblar redirects Google search results for infected users.

As for what to do about the situation, US-CERT "encourages users and administrators to apply software updates in a timely manner and use up-to-date antivirus software to help mitigate the risks."

The agency will provide additional information as it becomes available.

"This unexpected exploit of everyday software is a lesson to everybody about just how fragile things truly can be," the MojoHost rep concluded; recommending that webmasters of affected sites contact their hosting support team to help mitigate any damage and to issue a new FTP password.

Readers are urged to update their software by visiting the publisher's websites: get.adobe.com/flashplayer/ and get.adobe.com/reader/.

Related:  

Copyright © 2025 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More News

Sara Jay, Dan Leal to Sponsor XBIZ Amsterdam Kick-Off Event

Sara Jay’s Wyde Syde Productions and Porno Dan Leal’s Market64 will co-sponsor the Bottoms Up Day Drinking kick-off event for XBIZ Amsterdam 2025 at Excalibur Café on Sept. 2, from 2-4 p.m. (CET).

AEBN Publishes Report on DP Trends

AEBN has published a report on DP and extreme penetration categories from its straight and gay theaters.

Free Speech Coalition Appoints Megan Stokes to Board of Directors

The Free Speech Coalition (FSC) announced today that it has appointed Megan Stokes to its Board of Directors.

FansRevenue Acquires DivaTraffic

FansRevenue has acquired web traffic service DivaTraffic.

AEBN Announces Peter Green as Top Male Boy/Girl Performer for Summer 2025

AEBN has revealed its top 10 male Boy/Girl performers for summer 2025, with Peter Green landing atop the leaderboard.

Spicey AI Relaunches Site, Debuts $Spicey Tokens

Interactive voice chat platform Spicey AI has relaunched its website and introduced $Spicey tokens.

FSC: Missouri Age Verification Rule Will Not Take Effect August 30

The Free Speech Coalition (FSC) announced that Missouri's proposed age verification legislation will not take effect on August 30, as it had originally estimated.

Little Caprice, Marcello Bravo to Co-Host 2025 XMA Europa Awards

XBIZ is pleased to announce that husband-and-wife duo Little Caprice and Marcello Bravo will co-host adult’s biggest night in Europe: the 2025 XMA Europa Awards on Sept. 4, in the epic climax to XBIZ’s fall events series.

Germany Will Block Payments to AV-Noncompliant Adult Sites as of Dec. 1

Starting Dec. 1, Germany will implement new rules prohibiting financial institutions from providing payment services to adult sites deemed to have inadequate age verification systems and making it easier for the government to target websites mirroring the content of such sites.

Jerkmate Joins Pineapple Support as Partner-Level Sponsor

Jerkmate has joined the ranks of over 70 adult businesses and organizations committing funds and resources to Pineapple Support.

Show More