• Please take a moment to look over the Suggestions & Feedback rules before making a post: READ RULES HERE

BHW adware

Thanks for reporting it @partmarty the reason the other thread is closed is because that issue was removed and dealt with (I guess you posted the wrong link but I know the thread you are talking about - I closed it).

We are running some checks on the site right now and forcing a password reset just to be sure. As Wiz mentions if you can report the page you are seeing the issue on it makes it easier to check.
 
Advertise on BHW
LakeForest said:
javascript running on BHW called damnxd.org. Never saw damnxd.org before

it looks like a picture site.

I didn't get any popups.
Click to expand...

Got that too, noticed with noscript showing it. Might be someone exploiting some forum vulnerability through a signature ad.
 
There was a recent vBulletin vulnerability which Admin should look at and make sure nobody has taken advantage of it.

http://www.vbulletin.com/forum/foru...l-vbulletin-exploit-vbulletin-4-1-vbulletin-5
http://blog.imperva.com/2013/10/threat-advisory-a-vbulletin-exploit-administrator-injection.html
http://www.pcworld.com/article/2053...y-to-inject-rogue-administrator-accounts.html
http://www.net-security.org/secworld.php?id=15743
http://krebsonsecurity.com/2013/10/thousands-of-sites-hacked-via-vbulletin-hole/
http://www.infosecurity-magazine.com/view/34992/vbulletin-exploit-makes-the-cms-rounds/
http://www.dslreports.com/forum/r28731072-Hackers-exploit-vBulletin
http://www.incapsula.com/the-incapsula-blog/item/804-new-vbulletin-vulnerability-exploit-patch
http://hackersnewsbulletin.com/2013...d-using-exploit-vbulletin-forum-software.html

Not saying it is this exploit but something seems to have happened.


EDIT: Has been reported previously here: http://www.blackhatworld.com/blackh...6-35-000-vbulletin-sites-hacked-via-hole.html
 
Last edited:
still there - this was from the homepage


x5oa.jpg


Although I don't know why I'm whinging - Cos I'm gonna get a new ipad!!!!!
 
Last edited:
Nothing on the BHW homepage source reflects this. Scans are continually run, if we find anything we will let you know.

I would recommend you use a specific malware checker on that machine just to be sure (I see you state you don't have any malware) not the regular Norton quick checks.
 
Diamond Damien said:
Nothing on the BHW homepage source reflects this. Scans are continually run, if we find anything we will let you know.

I would recommend you use a specific malware checker on that machine just to be sure (I see you state you don't have any malware) not the regular Norton quick checks.
Click to expand...

Can we confirm this is only happening in Chrome?

The last few entries on this page look similar to this issue:
http://productforums.google.com/forum/#!topic/chrome/eBasgnkdWds
 
 
Last edited:
W130SN said:
Can we confirm this is only happening in Chrome?

The last few entries on this page look similar to this issue:
http://productforums.google.com/forum/#!topic/chrome/eBasgnkdWds
Click to expand...

I only use firefox and IE, I can't remember if the first couple of times were IE or FF, but the screenshot above is definately FF

- I wouldn't touch that spyware chrome if it was the last browser on earth (I'd do it old school and go to the library and actually talk to people)
 
All checks were done with Malwarebytes paid version - I wouldn't piss on Norton even if it was and fire and screaming help - help - help - help in a really cute voice.
 
Hard to belive that my pc was infected with any kind of virus at the time I got it as I just had connected my new SSD and reinstalled everything a few hours before.
At that time I only had known softwares installed along with firefox, nothing shady.

Someone mentioned about a signature exploit, that wouldnt work at the homepage as it dosent show any signatures.
More likely the ads.
 
Has anybody used a http sniffer to monitor the traffic between browser and server?
I am on the wrong machine at the moment.
 
Update, I've just seen the ad on a different website. (The iphone thing).

I'm still quite sure I haven't got any malware on my PC. Must be a chrome issue like people are suggesting.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top