Malware Attack?

[scorpio_rocks]

:eek: Firefox and/or Google are reporting the site (Forums) may have been attacked and may now be infecting visitors with malware.

Shrapnel need to check the integrity of the site and then apply for it to be removed from the black list.

[Tim Brooks]

We are working on it. With Google it takes time. Their last scan didn't report any problems, but if you don't contact them directly the report stays up for a long while...

But we are working to resolve with Google.

[scorpio_rocks]

Thanks for letting us know!

[Mobhack]

The attack site warning appeared again today, so I went past it and into the site regardless.

My Noscript add-on to Firefox then showed a new script on the forum page today that was not there yesterday when I reinstalled Noscript on top of Privacy Badger.

suchka46.pw

As it looked dodgy, I blocked that!.

A Google search on that name brought up a very few results, but one page (in Polish?) seemed to be about phishing, mentioned it in there somewhere.

Privacy Badger only has "newssltest.com" flagged as medium (block cookies) risk as a possible tracker - I presume that one is part of your own site's code?.

Ghostery is also running - it shows something titled "OpenX" as advertising/tracker (blocked).

Both of those were as before - when no attack warning came up, so the "suchka46.pw" script appears to be culpable?.

cheers
Andy

[Tim Brooks]

This appears to be a fake attack. Nothing is at risk. We are working with Google to resolve the block.

[garion333]

Is it actually an attack or is it related to the vBulletin zero day exploit?

http://securityaffairs.co/wordpress/41750/cyber-crime/vbulletin-security-patches.html

http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4332165-vbulletin-com-password-reset

http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4332166-security-patch-release-for-vbulletin-5-connect-versions-5-1-4-through-5-1-9