There were recently some problems regarding website security. Emo and myself are both confident that the problem has been dealt with, and now we're just waiting to get put back on the clean browsing list. For security reasons, I encourage everyone to do a virus scan. It's highly unlikely that anyone was infected, but it's always best to be safe about these things.
Recent site hack
Started by SpleenBeGone, Nov 12 2012 09:11 AM
24 replies to this topic
#1
SpleenBeGone
-
- Administrators
-
- 14,951 posts
Deer Leader of the Goriest Revolution
- LocationHouston
Posted 12 November 2012 - 09:11 AM
#2
Guest_ElatedOwl_*
Guest_ElatedOwl_*
-
- Guests
Posted 12 November 2012 - 09:23 AM
The details are basically that some naughty code was injected and running on the main page. I would like to make it clear that this was a vulnerability of the software being run on this site and at the time of writing does not seem like it was preventable; a patch was released for the software after the occurrence to fix the security issue.
You're most likely safe if you use Firefox or Chrome or have an active anti-virus running; regardless, I encourage you to do a virus scan. If you don't have an anti-virus client, I recommend performing a scan with malwarebytes. If anything seems out of the ordinary on your computer create a help request topic and I or someone else can help diagnose and resolve.
I'll be following this topic; if you have any concerns or questions about this feel free to make those heard here.
You're most likely safe if you use Firefox or Chrome or have an active anti-virus running; regardless, I encourage you to do a virus scan. If you don't have an anti-virus client, I recommend performing a scan with malwarebytes. If anything seems out of the ordinary on your computer create a help request topic and I or someone else can help diagnose and resolve.
I'll be following this topic; if you have any concerns or questions about this feel free to make those heard here.
#3
Calvary
-
- Members
-
- 6,624 posts
Conceptual
- Locationwww.
Posted 12 November 2012 - 11:00 AM
Cheers guys. =)
Ask for my discord/Insta/Tumblr if you want.
#4
Affray
-
- Members
-
- 5,753 posts
Knower of things
- LocationThe Great White North
Posted 12 November 2012 - 12:43 PM
I did notice some odd coding jargon at the top of the main page when I logged in before this weekend, then was given a foreboding warning by my browser not to trust this site just now when I logged in.
Hopefully no gremlins are running around inside my computer chewing wires and soldering things together.
That is what happens when you get infected right?
Hopefully no gremlins are running around inside my computer chewing wires and soldering things together.
That is what happens when you get infected right?
It is perfectly acceptable to fear and admire a being you could not possibly understand.
#5
Guest_ElatedOwl_*
Guest_ElatedOwl_*
-
- Guests
Posted 12 November 2012 - 12:55 PM
Heh, something like that.
#6
Majestic
-
- Members
-
- 289 posts
Megabyte
- LocationOut of phase.
Posted 12 November 2012 - 02:50 PM
I did notice some odd coding jargon at the top of the main page when I logged in before this weekend, then was given a foreboding warning by my browser not to trust this site just now when I logged in.
Hopefully no gremlins are running around inside my computer chewing wires and soldering things together.
That is what happens when you get infected right?
Yes it's mainly the Gnomes that do it.
*insert cliché inspirational quote here*
#7
Affray
-
- Members
-
- 5,753 posts
Knower of things
- LocationThe Great White North
Posted 12 November 2012 - 02:56 PM
Yes it's mainly the Gnomes that do it.
Those bastards.
It is perfectly acceptable to fear and admire a being you could not possibly understand.
#8
Majestic
-
- Members
-
- 289 posts
Megabyte
- LocationOut of phase.
Posted 12 November 2012 - 04:07 PM
Those bastards.
IKR?!
*insert cliché inspirational quote here*
#9
K_N
-
- Members
-
- 576 posts
Megabyte
- LocationPhoenix
Posted 13 November 2012 - 12:35 AM
I never noticed anything odd, what exactly was the injected code?
Rumors of my demise have been greatly exaggerated.
#10
twa
-
- Members
-
- 2,728 posts
The Actual Administrator
Posted 13 November 2012 - 03:06 AM
Still getting malware.
あ な た を 信 じ て い る 私 を 信 じ て
#11
Calvary
-
- Members
-
- 6,624 posts
Conceptual
- Locationwww.
Posted 13 November 2012 - 05:47 AM
Those bastards.
I always thought gnomes should be more included in typical fantasy lore. Just thought I'd put that out there. They should do occupy Middle-Earth for a better representation.
Ask for my discord/Insta/Tumblr if you want.
#12
Guest_ElatedOwl_*
Guest_ElatedOwl_*
-
- Guests
Posted 13 November 2012 - 08:24 AM
The gist is it checked to see if you were using Windows and running IE, FireFox or Opera. If the conditions were true it would print out some malicious stuff and log your IP to a file in the directory. I've been scanning through the logs vs. registered members IPs and I have yet to find a match.I never noticed anything odd, what exactly was the injected code?
Specifics here.
#13
SpleenBeGone
-
- Administrators
-
- 14,951 posts
Deer Leader of the Goriest Revolution
- LocationHouston
Posted 13 November 2012 - 03:06 PM
So it has been confirmed clean by google, now to wait for the warning to go away.Of the 105 pages we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-11-13, and the last time suspicious content was found on this site was on 2012-11-12.
#14
Wolf
-
- Members
-
- 6,487 posts
Zettabyte
Posted 13 November 2012 - 07:27 PM
So it has been confirmed clean by google, now to wait for the warning to go away.
That shit takes a while, apparently
#15
Dasherman
-
- Members
-
- 496 posts
Megabyte
- LocationAzeroth and Sanctuary, simultaneously by using quantum powers
Posted 14 November 2012 - 11:31 AM
So that's what Chrome warned me about with its 'Return to Safety'
Quis custodiet ipsos custodes?
(//MihiPotestasSit\\)
(//MihiPotestasSit\\)
#16
Affray
-
- Members
-
- 5,753 posts
Knower of things
- LocationThe Great White North
Posted 14 November 2012 - 12:34 PM
I just got here without any warnings coming up, much unlike the previous few days.
It is perfectly acceptable to fear and admire a being you could not possibly understand.
#17
Guest_ElatedOwl_*
Guest_ElatedOwl_*
-
- Guests
Posted 14 November 2012 - 01:37 PM
Indeed, it should actually be clean now. Last time I missed a page that google picked up as malicious, but I'm now relatively certain I've got the last of it. Last scan from google came up clean - chrome should stop warning by tomorrow (I hope).
#18
SpleenBeGone
-
- Administrators
-
- 14,951 posts
Deer Leader of the Goriest Revolution
- LocationHouston
Posted 14 November 2012 - 02:48 PM
Still warning me, but I'm happy to see that it's going away for people slowly.
All hail emo, the virus fixer.
All hail emo, the virus fixer.
#19
Guest_ElatedOwl_*
Guest_ElatedOwl_*
-
- Guests
Posted 14 November 2012 - 02:49 PM
ftfyAll hail emo, the notepad jockey.
#20
Wolf
-
- Members
-
- 6,487 posts
Zettabyte
Posted 14 November 2012 - 03:30 PM
Wow, is there anything notepad can't do?
besides open rich-text formatted files
besides open rich-text formatted files
