Not joined yet? Register for free and enjoy features such as alerts, private messaging and viewing latest posts and topics.

This forum been hacked?

Discuss ideas for improving and developing this forum
Post Reply
User avatar
dhobbs
Senior Member
Senior Member
Posts: 1621
Joined: Mon Jul 16, 2012 5:33 pm

This forum been hacked?

Post by dhobbs » Sat Dec 30, 2017 6:18 pm

I had this problem too, but as I said only with chrome.
I reinstalled chrome, downloaded malwarebytes, avast antivirus and all clear.
Even a hard reset didn't make much difference.
Advice was to reset your advertising id, but that didn't work.
Only going to Firefox worked for me.

I would personally like to know how the redirect works and whether it's a site or a browser issue.
Mine started when using photobucket, but eventually progressed to all sites.
3.0si roadster. Requisite stubby. Sound gen mod. LED numberplate lights. LED boot strip. Interior lights LED too. ZHP gearknob. Daily drive :driving:
Motor in boot. Bilstein B8 dampers. New radio, much better sounds :thumbsup:

User avatar
Tcochrane92
Member
Member
Posts: 650
Joined: Sat Apr 09, 2016 3:30 pm
Location: Leamington Spa, Warwickshire, UK

This forum been hacked?

Post by Tcochrane92 » Sat Dec 30, 2017 8:26 pm

Just got this.

Link it took me to was this:

http://secure.kingmonology.info/swp/uk/ ... 2KL00IOA00

And got this message:
SmartSelectImage_2017-12-30-19-24-44.png
SmartSelectImage_2017-12-30-19-24-44.png (116.38 KiB) Viewed 2968 times
Hope that helps
Current: Imola Red 400bhp 640d & Ocean Blue BMW S1000XR Sport SE
Past: Silver Grey Z4MR, Silver Grey Z4C & Titan Silver Z4 3.0i

User avatar
sp3ctre
Site Admin
Site Admin
Posts: 7492
Joined: Thu Jun 14, 2007 7:29 pm
Contact:

This forum been hacked?

Post by sp3ctre » Sat Dec 30, 2017 8:32 pm

What part of the forum were you on at the time? Did it appear when you were on a page or when you clicked a link?
If you are looking for low cost UK insurance, visit our official Z4-forum insurance scheme

User avatar
Tcochrane92
Member
Member
Posts: 650
Joined: Sat Apr 09, 2016 3:30 pm
Location: Leamington Spa, Warwickshire, UK

This forum been hacked?

Post by Tcochrane92 » Sat Dec 30, 2017 8:34 pm

sp3ctre wrote: Sat Dec 30, 2017 8:32 pmWhat part of the forum were you on at the time? Did it appear when you were on a page or when you clicked a link?
I loaded the New Posts page directly from a Bookmark saved on my phone (didn't navigate there from Z4 homepage)
Current: Imola Red 400bhp 640d & Ocean Blue BMW S1000XR Sport SE
Past: Silver Grey Z4MR, Silver Grey Z4C & Titan Silver Z4 3.0i

User avatar
sp3ctre
Site Admin
Site Admin
Posts: 7492
Joined: Thu Jun 14, 2007 7:29 pm
Contact:

This forum been hacked?

Post by sp3ctre » Sat Dec 30, 2017 8:35 pm

Tcochrane92 wrote: Sat Dec 30, 2017 8:34 pm
sp3ctre wrote: Sat Dec 30, 2017 8:32 pmWhat part of the forum were you on at the time? Did it appear when you were on a page or when you clicked a link?
I loaded the New Posts page directly from a Bookmark saved on my phone (didn't navigate there from Z4 homepage)
Interesting... can you replicate it every time?
If you are looking for low cost UK insurance, visit our official Z4-forum insurance scheme

User avatar
Tcochrane92
Member
Member
Posts: 650
Joined: Sat Apr 09, 2016 3:30 pm
Location: Leamington Spa, Warwickshire, UK

This forum been hacked?

Post by Tcochrane92 » Sat Dec 30, 2017 8:37 pm

sp3ctre wrote: Sat Dec 30, 2017 8:35 pm
Tcochrane92 wrote: Sat Dec 30, 2017 8:34 pm
sp3ctre wrote: Sat Dec 30, 2017 8:32 pmWhat part of the forum were you on at the time? Did it appear when you were on a page or when you clicked a link?
I loaded the New Posts page directly from a Bookmark saved on my phone (didn't navigate there from Z4 homepage)
Interesting... can you replicate it every time?
No, it seems to be random. Maybe one in every twenty times?
Current: Imola Red 400bhp 640d & Ocean Blue BMW S1000XR Sport SE
Past: Silver Grey Z4MR, Silver Grey Z4C & Titan Silver Z4 3.0i

User avatar
Tcochrane92
Member
Member
Posts: 650
Joined: Sat Apr 09, 2016 3:30 pm
Location: Leamington Spa, Warwickshire, UK

This forum been hacked?

Post by Tcochrane92 » Sat Dec 30, 2017 9:08 pm

Now I'm getting this error message:
SmartSelectImage_2017-12-30-20-02-10.png
Only get error messages and adverts like that on this webpage
Current: Imola Red 400bhp 640d & Ocean Blue BMW S1000XR Sport SE
Past: Silver Grey Z4MR, Silver Grey Z4C & Titan Silver Z4 3.0i

User avatar
Tcochrane92
Member
Member
Posts: 650
Joined: Sat Apr 09, 2016 3:30 pm
Location: Leamington Spa, Warwickshire, UK

This forum been hacked?

Post by Tcochrane92 » Sat Dec 30, 2017 9:08 pm

Now I'm getting this error message:
SmartSelectImage_2017-12-30-20-02-10.png
SmartSelectImage_2017-12-30-20-02-10.png (99.69 KiB) Viewed 2956 times
Only get error messages and adverts like that on this webpage
Current: Imola Red 400bhp 640d & Ocean Blue BMW S1000XR Sport SE
Past: Silver Grey Z4MR, Silver Grey Z4C & Titan Silver Z4 3.0i

User avatar
Buckz
Senior Member
Senior Member
Posts: 1112
Joined: Mon Dec 05, 2016 11:00 am
Location: West sussex

This forum been hacked?

Post by Buckz » Sat Dec 30, 2017 9:19 pm

Tcochrane92 wrote: Sat Dec 30, 2017 8:34 pm
sp3ctre wrote: Sat Dec 30, 2017 8:32 pmWhat part of the forum were you on at the time? Did it appear when you were on a page or when you clicked a link?
I loaded the New Posts page directly from a Bookmark saved on my phone (didn't navigate there from Z4 homepage)
Same here, I have a bookmark for new posts and thats how I get to the forum, wouldn't surprise me if it's that link only.
Image

User avatar
sp3ctre
Site Admin
Site Admin
Posts: 7492
Joined: Thu Jun 14, 2007 7:29 pm
Contact:

This forum been hacked?

Post by sp3ctre » Sat Dec 30, 2017 9:23 pm

Tcochrane92 wrote: Sat Dec 30, 2017 9:17 pmNow I'm getting this error message:
Don't worry about that, that was my fault... oops!

Worth removing those bookmarks and setting them up again? Seems to be a common theme.
If you are looking for low cost UK insurance, visit our official Z4-forum insurance scheme

greg81

This forum been hacked?

Post by greg81 » Mon Jan 01, 2018 3:40 pm

Tcochrane92 wrote: Sat Dec 30, 2017 8:26 pmJust got this.

Link it took me to was this:

http://secure.kingmonology.info/swp/uk/ ... 2KL00IOA00

And got this message:
SmartSelectImage_2017-12-30-19-24-44.png

Hope that helps
I'm also getting this one, plus the Asda gift card one. Only on this forum and also installed avast.and everything clear on my phone.

Chrome on Android. No particular areas of the forum and it's very random when it happens. Don't get this on any other websites

User avatar
sp3ctre
Site Admin
Site Admin
Posts: 7492
Joined: Thu Jun 14, 2007 7:29 pm
Contact:

This forum been hacked?

Post by sp3ctre » Mon Jan 01, 2018 4:13 pm

I have never used Android so I'm not sure what is possible, but is it possible to get a "page source" of the page where the popup originates from (the new posts screen, it seems)? I can't find any reference to these sites in the code, and I cannot replicate it on Windows, Mac OS or IOS.
If you are looking for low cost UK insurance, visit our official Z4-forum insurance scheme

greg81

This forum been hacked?

Post by greg81 » Mon Jan 01, 2018 5:20 pm

Sure, I'll hook up to the android SDK next time I get it and see what info I can get

User avatar
sp3ctre
Site Admin
Site Admin
Posts: 7492
Joined: Thu Jun 14, 2007 7:29 pm
Contact:

This forum been hacked?

Post by sp3ctre » Mon Jan 01, 2018 5:24 pm

greg81 wrote: Mon Jan 01, 2018 5:20 pmSure, I'll hook up to the android SDK next time I get it and see what info I can get
Appreciated. Difficult to diagnose when I don’t have access to the platform.
If you are looking for low cost UK insurance, visit our official Z4-forum insurance scheme

greg81

This forum been hacked?

Post by greg81 » Wed Jan 03, 2018 9:46 pm

Funnily enough I've not seen this in the past few days. May well be related to the ssl cert you've installed. Will keep an eye on it still

Post Reply