Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

I think the site is injected with malware?

MaxBaconMaxBacon Member LegendaryPosts: 7,846
There is something up with the site here recently on my side, and it only happens while I browse this website never anywhere else.

So in a quite frequent basis browsing pages here, it will take me out of the page and redirect me to a pishing website (not a popup). I have did look into malware/adware checks and scans but nothing on the system flags up, what leaves me to assume because this only happens on this page that there is something loading with the site that is causing the issue.

And it seems like it, managed to write this thread stopping the site from fully loading manually what fixed the forced redirects.

Comments

  • MaxBaconMaxBacon Member LegendaryPosts: 7,846
    Watching the script console on the browser it does show messages right before the redirect:


  • RosenborgRosenborg Member UncommonPosts: 162
    Happened to me as well couple of weeks ago, only once though. The page I got redirected to, informed me that my ISP had randomly chosen me for a free gift, iPhone, iWatch, etc.

    Day or two later the issue was wide spread and in the news here in Finland.
    MaxBacon
  • PhryPhry Member LegendaryPosts: 11,004
    I very much doubt the malware is from this site, but thats not to say that some 'posters' have not attempted to do so with dodgy links in their posts, fortunately they are fairly obvious. The only real protection against things like that is a decent anti virus and internet security package, something Microsoft do not have a reputation of providing for their OS's not that any OS is all that 'secure' these days. Part of the problem may be that unless you have selected otherwise, some browsers these days will 'preload' links on a web page in order to make it look as though the browser is 'faster' :/
    Gdemami
  • SlyLoKSlyLoK Member RarePosts: 2,698
    Phry said:
    I very much doubt the malware is from this site, but thats not to say that some 'posters' have not attempted to do so with dodgy links in their posts, fortunately they are fairly obvious. The only real protection against things like that is a decent anti virus and internet security package, something Microsoft do not have a reputation of providing for their OS's not that any OS is all that 'secure' these days. Part of the problem may be that unless you have selected otherwise, some browsers these days will 'preload' links on a web page in order to make it look as though the browser is 'faster' :/
    I have used many different things and windows defender has been as good as any of them. And it isnt bloated unlike so many of the free ones these days. And the pay ones are no better and offer no better protection in my experience.
    Gdemami
  • MaxBaconMaxBacon Member LegendaryPosts: 7,846
    edited July 2019
    Rosenborg said:
    Happened to me as well couple of weeks ago, only once though. The page I got redirected to, informed me that my ISP had randomly chosen me for a free gift, iPhone, iWatch, etc.

    Day or two later the issue was wide spread and in the news here in Finland.
    It's the same thing here but I'm in Portugal! :open_mouth:

     It's a fake page emulating my ISP saying I won free stuff. Can you give me links to the news of that event? What was the fix?
  • WizardryWizardry Member LegendaryPosts: 19,332
    Re-direct is a nice term to use but in reality ,it is a pop-up ad that loaded a new page on top of what you intended to see.Another method would be known as pop-under ads that load a new page under your intended page,you won't see right away,except in a tab but after you close the page you will see it or many of them.

    There is good reason the government did that questionnaire with Zuckerberg,topics such as tracking users AFTER they leave a site to which they agreed consent ONLY for that site.
    EVERY single website knows it is acting illegally but the laws are sketchy and not exact enough...yet to completely stop all the tracking and challenging of the EU unions laws.

    Everyone/websites know the REASON behind the laws,but if they see a way around the wording,they are all over it,i call that undermining the law,very similar to the new age of "early access"exploitation.

    The same goes for the use of "sponsored"there are ways around that as well,holding the definition to precise wording to again undermine the law.
    Still to this day,i still see advertising,you tubers,websites NOT announcing ANYTHING of value they received while trying to endorse a product.If you received anything of value,it is the LAW to announce it as such,so that readers will know the true facts about what they are viewing,the relevance between the product's owners and the advertisers/endorsement people.

    This has very little to do with other users and their links,i would hope by now that everyone can spot those foreign people making new accounts to post some sketchy link without any thought at all.In other words,if you are dumb enough to click one of those,you deserve it.I have never seen a legit user here try to place a sketchy link,the worst case has been referrals and nothing more,no intent to load any malware or anything like that.




    Gdemami

    Never forget 3 mile Island and never trust a government official or company spokesman.

  • MaxBaconMaxBacon Member LegendaryPosts: 7,846
    edited July 2019
    @Phry @SlyLoK in terms of malware/adware I have everything up-to-date and all, AdwCleaner, Malwarebytes, HitmanPro, the Kaspersky... none detects anything. Resetting the browser settings also do not stop it, I am baffled as to where is it coming from to not flag up anywhere, and the console shenanigans showing this happening only on this site and nowhere else I'm browsing to... hmm

    What I can think of is the site is exposed to whatever this exploits, if it is what @Rosenborg mentioned it might be one of those situations where the infection spreads a lot before it is stopped because it's the exact issue as what he said happened in Finland O_o
  • AriesTigerAriesTiger Member UncommonPosts: 444
    edited July 2019
    If anyone is following this, it has happened to me also. And it's a popunder from the ads displayed on this website. NOT clicking any links. I went back to the link (it was a forum discussion about SWTOR) and I clicked on "Network" and saw the redirect from the popunder ad.

    JUST for clarification...not trying to "stir the pot" or anything.

    EDIT: Only seems to happen on chrome (and of that...has only happened 3 times)...which I'm forced to use to view some of my old college stuff like credits and classes taken and such. The "blackboard" module.
  • UtinniUtinni Member EpicPosts: 2,209
    I'd certainly avoid clicking on any of the anime posters everywhere on the site. Also don't buy the sponsored $5 windows keys.
Sign In or Register to comment.