Yesterday I was looking for some public domain photos of Thailand on Thai Government websites using Google’s Image search for a book I am working on.

If you search for anything, and use the following, it limits the search to a specific domain – keyword site:.go.th – this would be an example of how to search for anything only on Thai Government web sites.

I was searching for the word “Police” at only Thai Government sites and was surprised what I found.  There were numerous images of Thai Police, but I also saw images of items that looked like they were for sale.  I also noticed a lot of images that were not related to Thai Police at all – and all were coming from one site mainly – ppr3.go.th

Clicking on any of those Thai Government  ppr3 images, redirects you to a site that wants to scan your computer to look for viruses – which of course it will say it found and prompt you to download an executable with who knows what on it.  This is where it sends you -

sheltersw.info/fast-scan/

PPR3.go.th redirect

If you try to close the page, you get another pop-up with download anyhow.

ppr3 redirect download

I shut the window down, and immediately did a scan on my computer just in case.

I revisited the Thai Government ppr3.go.th via one of the images again today, and got a different screen – Thanks Google – not sure who or how Google gets notified about this – but it will only show up if your browser is set for it.

Hijack Warning

This is the site of the Thai Government Provincial Police Region 3 and it is safe to go to the main page – it is somewhere else that has been hijacked.

Here is the page you will see today – splash page for election:

Thai Election Splash Page

Then you can click and get to the REAL Thai Government Provincial Police Region 3 site

Provincial Police Region 3

There is a second Thai Government site, The Department of Environmental Quality Promotion, www.deqp.go.th that also is running the same redirect.

This prompted me to look for some other words that I wasn’t really interested in but wanted to see what showed up.  I searched for Xanax, Viagra, sex, porn, Rolex and a few others.  OH MY GOD!  The number of Thai Government web sites that showed up in the image search was astounding.

The winner for most porn on one Thai Government web site goes to the Thai POLICE at Lankrabue – Kamphaengphet.  Tons of it on their Web Board / Forum.  WARNING – explicit pics

Lankrabue Kamphaengphet Police Web Forum

More porn available at the following Thai Government sites – Khukhan Police Department Forum, Khon Kaen Police Forum, Clearing House Mechanism – part of Office of Natural Resources and Environmental Policy and Planning, and Bang Bua Thong City Municipality. There is also a bunch of porn at the Thai Government Wongkong Forum – I don’t know what this Wongkong Thai Government office is or does, but the music is annoying.

Most of the above Thai Government sites with the porn are web boards or forums that either have spam comments or a bunch of porno pics posted.  Means that no one in the Thai Government is monitoring the forum and/or it is not the latest version and not very secure.  The Thai Government Bang Bua Thong City Municipality site is running SMF (Simple Machines Forum) version 1.1.9 from May 2009 – way out of date.

There is also porn on the Thai Government Ministry of Public Health E-Library Forum along with a million spammy links to other porn sites.

Then, I found a Thai Government site that has been taken over and is being used by others to auto-blog and sell items.

This is some sort of Thai Government Youth Guidance Site and the server has been exploited – there are numerous sub-domains created and WordPress blogs installed selling all kinds of items – Gold Chains, Electronics, Joel’s Blog, Kindle Reader Review and Sales.  I don’t know where these government servers are maintained, but they are not very secure if all these blogs have been created in separate sub-domains.

The remaining Thai Government sites that I found were just victims of black hat marketers that exploit blogs and forums that automatically approve comments.  They then tell their friends and soon there are hundreds or thousands of posts with tons and tons of links to their web sites or sites where they are selling anything from Viagra, to replica Rolex watches, to pornography.

Even the Thai Government Maha Sarakham Provincial Culture Office has a ton of spammy links to sites far worse than the video of the three topless teens at Songkran that the Thai Government Culture Minister said would damage Thailand’s image.  Here you can see a post for Sexy Jessica Lynn and links to purchase the movies at the Thai Government Ministry of Culture.  Wonder if these movies being on the Ministry of Culture’s outdated phpbb Forum damage Thailand’s image also?

The following are more of the same – tons of spammy links in the comments:

• Nakhon Phanom Excise Area Office
• Food and Drug Administration under the Ministry of Public Health
• Nakhon Nayok Police
• Chonburi Police
• Khantharalak Police web board
• National Statistical Office
• Charad Sub-District Municipality Phattalung web board
• Bangkok Food Safety
• Ban Chuat Subdistrict Administration Organization
• Samyod Radio – Crime Suppression Division (webwhiz forum 7.6 (release date 18 Nov 2003) (current 10.1)
• Chawang Subdistrict Administration Organization
• Panomwong School
• Phayuhapao School (683 comments with spam links)
• Office of the Basic Education Commission (OBEC) – Surat Thani
• BPP41
• Inkeree subdistrict Administrative Organization
• Lazy Dad at Provisional Police Region 3
• Nose Bogies at Provisional Police Region 3
• Stabby at Provision Police Region 3
• Department of Land Transport
• Royal Thai Army Medical Department PMQA
• Naphru OTOP
• More Ministry of Public Health E-Library
• Provincial Police Region 5
• Nongkhai Immigration
• Mahasarakham
• OBEC
• Klang Comptroller General Department
• More Nakhon Nayok Police
• Nakhon Si Thammarat
• Thai Industrial Standards Institute [TISI]
• Ministry of Information and Communication Technology (MICT) – The Internet Police
• Sisaket
• Office of the non-formal and informal education

Phew!  I believe this is just the tip of the iceberg as there are thousands of Thai Government web sites and it appears that they are all vulnerable to spam, porn, and auto-approved comments.

Shows that the web board / forum software on these Thai Government sites, in many cases, is out of date and probably without the latest security patches and whomever set them up, didn’t set the commenting to be approved by Admin/Moderator – that would mean someone would actually have to work.

What needs to happen is the Thai Government System Administrators need to DELETE the WEB BOARDS / FORUMS and in some cases, the photo albums (much the same as forums) from each and every Thai Government web site.  These are totally worthless and seldom used except by the spammers.

Forums may have been “cool” 4-5 years ago, and work well if you have an admin and a handful of moderators, but with Facebook and Twitter, reaching out from the Thai Government to the local people has never been easier and no Admin is required.  Get rid of the forums unless the Thai Government wants to help blackhat spammers make money selling Viagra, Xanax, Fake Rolex watches, and porn.

If the Thai Government intends to keep the forums, then please monitor, set comment approval by Admin, and delete the crap.

All Thai Government Offices cannot just put up a web site and then never check it.

The text was modified to remove a broken link to http://chm-thai.onep.go.th/CHM/forum/forum_posts.asp?TID=232842.

The text was modified to remove a broken link to http://www.charad.go.th/webboard/view.php?No=&visitOK=1.

The text was modified to remove a broken link to http://www.chawang.go.th/otop/view.php?No=19.

The text was modified to remove a broken link to http://www.panomwang.go.th/album/view.php?album_id=48.

The text was modified to remove a broken link to http://www.phayuhapao.go.th/modules.php?name=pamon&file=view&qID=78.

The text was modified to remove a broken link to http://saraburi.dlt.go.th/smf2/index.php?topic=86757.0.

The text was modified to remove a broken link to http://www.amed.go.th/pmqa/webboard/viewtopic.php?f=3&t=31657.

The text was modified to remove a broken link to http://webboard.police5.go.th/view.php?No=226.

The text was modified to remove a broken link to http://inno.obec.go.th/home/?name=webboard&file=read&id=126.

The text was modified to remove a broken link to http://skillsdevelop.mict.go.th/aca2008/index.php?option=com_fireboard&Itemid=0&func=view&id=82&catid=1&limit=6&limitstart=30.

The text was modified to remove a broken link to http://www.guidance.go.th/.

The text was modified to remove a broken link to http://mens14kgoldchains.guidance.go.th/.

The text was modified to remove a broken link to http://tate4333262.guidance.go.th/.

The text was modified to remove a broken link to http://joel7909597.guidance.go.th/.

The text was modified to remove a broken link to http://reviewebookreadersforsale.guidance.go.th/.

The text was modified to remove a broken link to http://nakhonphanom.excise.go.th/modules.php?name=News&file=article&sid=4.

The text was modified to remove a broken link to http://mahasarakham.mnre.go.th/envi//?name=news&file=readnews&id=10.

The text was modified to remove a broken link to http://forum.wongkong.go.th/.

The text was modified to remove a broken link to http://www.wongkong.go.th/.

The text was modified to remove a broken link to http://www.kantharalak.sisaket.police.go.th/Mains/?name=webboard&file=read&id=7.

The text was modified to remove a broken link to http://service.nso.go.th/webboard/question.asp?qid=372.

Tags: mict OBEC porn replica rolex spam thai government tist viagra web site xanax