Wordpress themes infected with Trojans

We have discovered that some free Wordpress themes offered on the Web are infected with Trojans. This means that when downloading and installing such a theme, the Trojan is automatically installed with it.

The Trojan discovered earlier today, which was found hidden inside the theme named "Eco-blog" and hosted at http://www.zizapixel.com/wp-themes/eco-blog-theme.html, had following signatures:

PHP.RSTBackdoor (Symantec)
Trojan.Shell-2 (ClamAV)

When installing the theme mentioned above, this backdoor PHP shell will install itself to:

wp-content/themes/eco-blog/function.php

We advise everyone to do a virus scan on any Wordpress themes not downloaded from a reputable source before uploading and installing such theme.

DoS Attack (Resolved)

Earlier today, we had a DoS (Denial of Service) attack on one of our networks. The attack affected two of our servers - ALPHA and BRAVO.

Security measures were taken to block the attacks, and we are happy to inform our clients that the network is back in operation since shortly after 18:00 +0000 DST.