We received a notice of a phising attrack on one of our sites. After some checking it seems to use the Simple RSS viewer as below. We changed the permissions for redir.php to 000 to stop it.

ANy ideas on how? We checked the code and files dates ets and all seems unchanged

www.OURDOMAIN.com/modules/mod_jw_srfr/redir.php?netflix.signin&url=http%3A%2F%2Fwww.1314theone.com%2Fd7c0c3a5c4/netflix.com/login/ [109.203.112.26]

We are currently working on a new version.
There will be an update next week.
As a temp measure, you can disable redirecting through your own domain and remove the contents of this file:
github.com/joomlaworks/simple-rss-feed-reader/blob/master/redir.php

So its a bug then.

OK we ahve left disabled for now, can you let us know when its ready and we can test if you like

It is scheduled for the coming two weeks.
We will announce it here and on twitter.
Before the update the code will be uploaded here: github.com/joomlaworks/simple-rss-feed-reader

Is there any update yet? Its almost 4 weeks and we cant use the Rss feeder

Hello, unfortunately no updates at this moment.

OK we will have to look for an alternative RSS reader if this takes much longer