1. Guest - Remember that Thread Prefixes are a search tool! Click on a Thread Prefix and all threads with the same Prefix in that forum will be offered to you. To dismiss this notice click on X >>>
    Dismiss Notice
  2. Our gif only content threads have a rule where all thumbs must be posted as a static thumbnail that does not play. Currently imagebam made a change where they no longer produce static thumbs. Therefore, please do not use imagebam, or any host, that provides live playing gifs in those specific threads. If you see your gif playing once you post, try to use a smaller thumbnail and if that does not work use a different approved host.
    Dismiss Notice
  3. Can't Log-in?. If your password is no longer accepted but the email address registered in your profile is working, use the "Forgot Your Password?" routine. However, if your registered email address is unusable, create a new temporary phun account and contact S-type.
    Dismiss Notice
  4. ATTN: Imagehost picpie is infected with the "internet security warning" redirect that tries to take users hostage with an inescapable redirect. Avoid using picpie as an imagehost.
    Dismiss Notice
  5. Too many Alerts? Why not adjust your "Alert Preferences" in your Profile Page?
    Dismiss Notice
Thread Prefixes Do not use Imagebam in GIF Content Threads Log-in issues picpie Alerts out of control?

Malware Warning

Discussion in 'About phun.org' started by cayne, Sep 17, 2012.

Page 4 of 6
  1. TheOne

    TheOne The President ★ ★ ★ ☆ ☆ 15 Year Member

    Joined:
    Jun 1, 2005
    Messages:
    81,787
    Likes Received:
    32,628
    wtf.. that's soo wrong, Ubuntu is a OS (I know the above link isn't an OS), couldn't they have thought of a better name?
     
    TheOne, Sep 20, 2012
    #61
  2. Cold As Ice

    Cold As Ice Master of Solid Water Ten Years of Phun

    Joined:
    Sep 24, 2005
    Messages:
    143,078
    Likes Received:
    73,958
    Had the warning as well.
     
    Cold As Ice, Sep 20, 2012
    #62
  3. Magge

    Magge Yoda no more, just a friendly alpaca lover ! ★ ★ ★ ★ ★ 15 Year Member Movers & Shakers Power Poster The Alpaca Whisperer Phun Award Holder

    Joined:
    Mar 18, 2008
    Messages:
    111,959
    Likes Received:
    370,577
    Me too on Chrome !
     
    Magge, Sep 20, 2012
    #63
  4. darkfido

    darkfido

    Joined:
    Oct 29, 2009
    Messages:
    403
    Likes Received:
    967
    Google warning is back on AGAIN!:icon8:.WTF! Sort your site out guys
     
    darkfido, Sep 20, 2012
    #64
  5. robo99

    robo99 passing thru ★ ★ ☆ ☆ ☆

    Joined:
    Oct 20, 2008
    Messages:
    10,718
    Likes Received:
    15,088
    chrome warning dated 9-20-1012 active
     
    robo99, Sep 20, 2012
    #65
  6. DXM

    DXM ★ ★ ☆ ☆ ☆

    Joined:
    May 30, 2010
    Messages:
    2,920
    Likes Received:
    10,649
    using Firefox i got this warning again :

    [​IMG]

    when using Opera my Anti Virus give me this warning :

    [​IMG]
     
    DXM, Sep 20, 2012
    #66
  7. whoswho

    whoswho

    Joined:
    Sep 13, 2009
    Messages:
    95
    Likes Received:
    92
    Currently can't find any suss code on this page... which forum page(s) are you people getting a warning on? If specific pages, can you link them here?

    A suggestion til all is done and dusted: browse this forum with Firefox and noscript - do not allow phun.org scripts, but the forum should mostly display correctly anyhow.
     
    whoswho, Sep 20, 2012
    #67
  8. darkfido

    darkfido

    Joined:
    Oct 29, 2009
    Messages:
    403
    Likes Received:
    967
    Im getting the warning on every page i open.Who ever is in charge of "Phun" needs to get their finger out of his arse and FIX it.
     
    darkfido, Sep 20, 2012
    #68
  9. iCeleb

    iCeleb ★ ☆ ☆ ☆ ☆

    Joined:
    Feb 25, 2012
    Messages:
    550
    Likes Received:
    8,585
    About 2 weeks ago there were three days when a double (even triple) login was required. At first I thought it was due to a Firefox upgrade that coincided with the time. In retrospect, it may be related to the pw1, pw2 iFrame code that may have compromised passwords. If so, the intruders have been silent but operational for some time.

    FYI.
     
    iCeleb, Sep 20, 2012
    #69
    TheRiver likes this.
  10. whoswho

    whoswho

    Joined:
    Sep 13, 2009
    Messages:
    95
    Likes Received:
    92
    I've really gone over a thread or two... can't find anything suss as a member (not doubting its existence by any means tho) - perhaps a compromised .js file? Maybe a malicious GIF image? Are there 3rd party ads on this site? I wouldn't know as I run mvps hosts on top of everything else.

    Hopefully admin can see things we members can't.

    And with Firefox/noscript, I don't have any issues at the moment - my AV is NOD32 and it isn't picking up anything either.
     
    whoswho, Sep 20, 2012
    #70
  11. cayne

    cayne Guest

    Yeah, checked it too...seems like he's still able to do some shit around here. So fucking annoying. I'm on it.
     
    cayne, Sep 20, 2012
    #71
    Magge likes this.
  12. whoswho

    whoswho

    Joined:
    Sep 13, 2009
    Messages:
    95
    Likes Received:
    92
    Ok... that link in the kaspersky warning picture above DOES have a familiar line of code in it:
    WARNING: AGAIN DO NOT GO TO THIS LINK:

    So it's related to the 'pw' iframe from before. What I'm not seeing from my end is how phun is linking to the prior link that kaspersky is warning about.
     
    whoswho, Sep 20, 2012
    #72
  13. whoswho

    whoswho

    Joined:
    Sep 13, 2009
    Messages:
    95
    Likes Received:
    92
    whoswho, Sep 20, 2012
    #73
  14. Cold As Ice

    Cold As Ice Master of Solid Water Ten Years of Phun

    Joined:
    Sep 24, 2005
    Messages:
    143,078
    Likes Received:
    73,958
    You need to relax, they are working on it.
     
    Cold As Ice, Sep 20, 2012
    #74
  15. S-type

    S-type Remember to smile! Staff Member ★ ★ ★ ★ ★ 15 Year Member

    Joined:
    Jun 2, 2007
    Messages:
    45,765
    Likes Received:
    137,931
    darkfido

    phun.org is under attack, and your smartass remarks from the sidelines are unhelpful!
     
    S-type, Sep 20, 2012
    #75
    Ramsfan, CarpePM, Magge and 2 others like this.
  16. cayne

    cayne Guest

    The inject has been removed. And as I stated in the other thread, this time it appears as if he had access to a compromised account. We've reset all accounts and removed some privileges. It shouldn't happen again. But the technicians are still investigating the whole issue. Be assured that we try our best to make this a "safe" place again. On a side note, this was the first "successful" attack on this website since 7 years, a pretty solid record. But yeah, we will have to have an eye on all this stuff.
     
    cayne, Sep 20, 2012
    #76
    doremi, Ramsfan, Jubs and 1 other person like this.
  17. Sennsational

    Sennsational BANNED ★ ★ ☆ ☆ ☆

    Joined:
    Jun 23, 2007
    Messages:
    20,867
    Likes Received:
    11,147
    I am getting the Malware Warning again. Ugh.
     
    Sennsational, Sep 20, 2012
    #77
  18. darkfido

    darkfido

    Joined:
    Oct 29, 2009
    Messages:
    403
    Likes Received:
    967
    How i'm i being a smartass? Im getting warning alerts every time i open phun.Should i not be concerned?
     
    darkfido, Sep 20, 2012
    #78
  19. TheOne

    TheOne The President ★ ★ ★ ☆ ☆ 15 Year Member

    Joined:
    Jun 1, 2005
    Messages:
    81,787
    Likes Received:
    32,628
    as if you didn't know that the "who ever is in charge of "Phun" " isn't just sitting on his finger.
     
    TheOne, Sep 20, 2012
    #79
  20. cayne

    cayne Guest

    I kept getting it a few times again, as well. But the techs told me, this happens due to the Google ban, and not actually a threat. Here's a useful site to check for malware on pages. And I've just re-scan'ed it 10 times, without a found. http://sitecheck.sucuri.net/results/forum.phun.org (the site is still blacklisted, because the review isn't completed by Google, but no malware was found.
     
    cayne, Sep 20, 2012
    #80
Page 4 of 6

Share This Page