If you were hit by the recent Wordpress hack which redirects your visitors to paymoneysystem.info and paymoneysystem.info/in.cgi?michaeleknowlton, you may be wondering just who exactly Michael Knowlton is, and why (and how) he hacked your website. Here’s the run-down.

There is a brand new Wordpress hack attack making the rounds, that redirects all traffic to your site through itsallbreaksoft.net and paymoneysystem.info, and then on to any number of junk sites full of advertisements. The intermediate redirect to paymoneysystem.info actually goes through the URL paymoneysystem.info/in.cgi?michaeleknowlton, suggesting that someone using the name Michael Knowlton is going to be benefiting from any monies earned by the ads. Here’s how it was done, and how to fix it. Fortunately, the immediate fix is very easy.