Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Page 1 of 4 123 ... LastLast
    Results 1 to 10 of 33

    potential home page hack

    This is a discussion on potential home page hack within the Speak to the staff forums, part of the Website news category; Hi, (longtime lurker dont usually post) Thought I would let you know that I tried to browse to the skyuser.co.uk ...

    1. #1
      scot-kiwi's Avatar
      scot-kiwi is offline Sky User Member
      Exchange:
      Broadband ISP: UKOnline
      Router: Netgear V1 DG834GT
      Sky TV: Sky Basic
      Join Date
      Apr 2009
      Posts
      5
      Thanks
      0
      Thanked 0 Times in 0 Posts

      potential home page hack

      Hi,
      (longtime lurker dont usually post)
      Thought I would let you know that I tried to browse to the skyuser.co.uk homepage as usual today but my AV flashed up a warning about the page being spiked with a malicious Iframe, normally would ignore it as a False positive, but a few sites I trust have been nailed by the same exploit, usually inserted by chinese malware types.
      Anyways hope that helps you guys out, forum pages seem unaffected oddly, its just the homepage that seems to have been spiked


    2. Advertisement
    3. #2
      NewsreadeR's Avatar
      NewsreadeR is offline Site Founder
      Exchange: Marshalls Cross
      Broadband ISP: Sky Broadband Unlimited
      Router: Sagem F@ST 2504n
      Sky TV: Sky+HD box
      Join Date
      Aug 2006
      Location
      St Helens
      Posts
      22,211
      Thanks
      108
      Thanked 373 Times in 304 Posts
      Blog Entries
      48

      Re: potential home page hack

      Thanks for letting us know - Will investigate it now. Problem is - The home page uses the same ad zone as the forums. So the problem should be inherited across.

      Will change the code now though just to be sure.




      ~ Never, ever, argue with an idiot. They'll drag you down to their level and beat you with experience ~

      Follow us on Twitter @skyuser

    4. #3
      NewsreadeR's Avatar
      NewsreadeR is offline Site Founder
      Exchange: Marshalls Cross
      Broadband ISP: Sky Broadband Unlimited
      Router: Sagem F@ST 2504n
      Sky TV: Sky+HD box
      Join Date
      Aug 2006
      Location
      St Helens
      Posts
      22,211
      Thanks
      108
      Thanked 373 Times in 304 Posts
      Blog Entries
      48

      Re: potential home page hack

      I have removed the codes for the ads on the homepage. Please let me know if the issue is still there for you. I use NOD32 and I have not received any similar warnings.




      ~ Never, ever, argue with an idiot. They'll drag you down to their level and beat you with experience ~

      Follow us on Twitter @skyuser

    5. #4
      steve16751's Avatar
      steve16751 is offline Sky User Member
      Exchange: newas
      Broadband ISP: Sky Broadband Unlimited
      Router: Netgear V2 DG934G
      Sky TV: Sky+ HD
      Join Date
      Apr 2008
      Location
      washington
      Posts
      2,867
      Thanks
      1
      Thanked 25 Times in 25 Posts

      Re: potential home page hack

      scot-kiwi
      Hi the same only home page log on thought something wrong with Avast so tried
      other trusted sites no problem every time trying to log on skyuser Avast would say caution virus has been detected and details lframe-inf virus/worm
      Thanks put my mind at rest

    6. #5
      NewsreadeR's Avatar
      NewsreadeR is offline Site Founder
      Exchange: Marshalls Cross
      Broadband ISP: Sky Broadband Unlimited
      Router: Sagem F@ST 2504n
      Sky TV: Sky+HD box
      Join Date
      Aug 2006
      Location
      St Helens
      Posts
      22,211
      Thanks
      108
      Thanked 373 Times in 304 Posts
      Blog Entries
      48

      Re: potential home page hack

      Is the message still there Steve?




      ~ Never, ever, argue with an idiot. They'll drag you down to their level and beat you with experience ~

      Follow us on Twitter @skyuser

    7. #6
      NewsreadeR's Avatar
      NewsreadeR is offline Site Founder
      Exchange: Marshalls Cross
      Broadband ISP: Sky Broadband Unlimited
      Router: Sagem F@ST 2504n
      Sky TV: Sky+HD box
      Join Date
      Aug 2006
      Location
      St Helens
      Posts
      22,211
      Thanks
      108
      Thanked 373 Times in 304 Posts
      Blog Entries
      48

      Re: potential home page hack

      Quote Originally Posted by scot-kiwi View Post
      Hi,
      (longtime lurker dont usually post)
      Thought I would let you know that I tried to browse to the skyuser.co.uk homepage as usual today but my AV flashed up a warning about the page being spiked with a malicious Iframe, normally would ignore it as a False positive, but a few sites I trust have been nailed by the same exploit, usually inserted by chinese malware types.
      Anyways hope that helps you guys out, forum pages seem unaffected oddly, its just the homepage that seems to have been spiked
      Are you using Avast by any chance?




      ~ Never, ever, argue with an idiot. They'll drag you down to their level and beat you with experience ~

      Follow us on Twitter @skyuser

    8. #7
      scot-kiwi's Avatar
      scot-kiwi is offline Sky User Member
      Exchange:
      Broadband ISP: UKOnline
      Router: Netgear V1 DG834GT
      Sky TV: Sky Basic
      Join Date
      Apr 2009
      Posts
      5
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: potential home page hack

      yeah I am using Avast, but its only popping up on some sites, some of which have reported issues with hacks inserting hidden links to .cn pages

      I'll swap over to linux, and have a look and see if anything of interest shows up.

      Could be a false positive, but thought better to mention just in case it wasnt.

    9. #8
      NewsreadeR's Avatar
      NewsreadeR is offline Site Founder
      Exchange: Marshalls Cross
      Broadband ISP: Sky Broadband Unlimited
      Router: Sagem F@ST 2504n
      Sky TV: Sky+HD box
      Join Date
      Aug 2006
      Location
      St Helens
      Posts
      22,211
      Thanks
      108
      Thanked 373 Times in 304 Posts
      Blog Entries
      48

      Re: potential home page hack

      Quote Originally Posted by scot-kiwi View Post
      yeah I am using Avast, but its only popping up on some sites, some of which have reported issues with hacks inserting hidden links to .cn pages

      I'll swap over to linux, and have a look and see if anything of interest shows up.

      Could be a false positive, but thought better to mention just in case it wasnt.
      The give away sign is iframe and also after the closing /html statement in a webpage. I have checked / double checked and tripple checked and our home page has no iframe references, or any reference after the closing /html statement.

      Normally if there was any malicious code, Google would block the page in search results, which it hasn't. I think it is a false positive, but am scanning the server now.




      ~ Never, ever, argue with an idiot. They'll drag you down to their level and beat you with experience ~

      Follow us on Twitter @skyuser

    10. #9
      steve16751's Avatar
      steve16751 is offline Sky User Member
      Exchange: newas
      Broadband ISP: Sky Broadband Unlimited
      Router: Netgear V2 DG934G
      Sky TV: Sky+ HD
      Join Date
      Apr 2008
      Location
      washington
      Posts
      2,867
      Thanks
      1
      Thanked 25 Times in 25 Posts

      Re: potential home page hack

      Tried to connect to skyuser and Avast cuts in Abort Connection on skyuser home page on top no direction as in forum at all. top right Skyuser is the only thing left there if you click on it Avast cut in to get back on skyuser had to click on go back a page

    11. #10
      NewsreadeR's Avatar
      NewsreadeR is offline Site Founder
      Exchange: Marshalls Cross
      Broadband ISP: Sky Broadband Unlimited
      Router: Sagem F@ST 2504n
      Sky TV: Sky+HD box
      Join Date
      Aug 2006
      Location
      St Helens
      Posts
      22,211
      Thanks
      108
      Thanked 373 Times in 304 Posts
      Blog Entries
      48

      Re: potential home page hack

      Looking at Avast's own forums

      HELP! HTML:Iframe-inf on my site....

      Other people are reporting this, and the facts that I have already highlighted, iframe and code after the /html statement.

      Our homepage carries none of the above and yet Avast is still reporting this, and Google ain't blocked it. Coupled with the fact that the virus scan we are currently running has found zero issues so far, I would say that Avast have an issue at the moment and not in fact our website. Although if we are suffering a hack, then we will be 100% honest and admit it.

      In fact if you log out of you forum account can you browse SkyUser, is Avast still blocking access? Our forums carry the same code as the homepage.




      ~ Never, ever, argue with an idiot. They'll drag you down to their level and beat you with experience ~

      Follow us on Twitter @skyuser

     

     
    Page 1 of 4 123 ... LastLast

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2017. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION