Not joined yet? Register for free and enjoy features such as alerts, private messaging and viewing latest posts and topics.

This forum been hacked?

Discuss ideas for improving and developing this forum
Post Reply
User avatar
Buckz
Senior Member
Senior Member
Posts: 1112
Joined: Mon Dec 05, 2016 11:00 am
Location: West sussex

This forum been hacked?

Post by Buckz » Fri Dec 29, 2017 8:33 pm

sp3ctre wrote: Fri Dec 29, 2017 8:26 pm
Buckz wrote: Fri Dec 29, 2017 8:18 pm I've only seen it on my android phone - I have multiple phones and all do that.
What do you mean? You have multiple android phones and all behave this way? I only use iphones, ipads, macs and windows pc’s
Yup, android and chrome browser is where I get it.
Image

Monkeydonkeyratmagic
Member
Member
Posts: 491
Joined: Mon Oct 16, 2017 1:53 pm
Location: Windsor

This forum been hacked?

Post by Monkeydonkeyratmagic » Fri Dec 29, 2017 10:30 pm

Next time I get it happen I'll post all the URLs with a do not click message just so no one else hits them. It's only this forum I get I it on. I only use Samsung Browser not chrome etc (old school and never adapted)
MR-2 Turbo Rev2

Yep no Z yet. On the hunt.

Monkeydonkeyratmagic
Member
Member
Posts: 491
Joined: Mon Oct 16, 2017 1:53 pm
Location: Windsor

This forum been hacked?

Post by Monkeydonkeyratmagic » Fri Dec 29, 2017 10:35 pm

Speak of the devil and he shall appear. The url has my location and phone brand and browser type in it and even that I'm with BT. How fu@cked up is that.
Screenshot_2017-12-29-21-32-15.png
Screenshot_2017-12-29-21-32-15.png (187.33 KiB) Viewed 1456 times
http://secure.kingmonology.info/swp/uk/ ... 9B100IOA00

Lol at this giant url.
MR-2 Turbo Rev2

Yep no Z yet. On the hunt.

Monkeydonkeyratmagic
Member
Member
Posts: 491
Joined: Mon Oct 16, 2017 1:53 pm
Location: Windsor

This forum been hacked?

Post by Monkeydonkeyratmagic » Fri Dec 29, 2017 10:36 pm

The history in my phone also goes full retard.
Screenshot_2017-12-29-21-36-21.png
Screenshot_2017-12-29-21-36-21.png (171.43 KiB) Viewed 1456 times
MR-2 Turbo Rev2

Yep no Z yet. On the hunt.

sticky

This forum been hacked?

Post by sticky » Fri Dec 29, 2017 10:51 pm

Space invaders

User avatar
Mr Tidy
Legend
Legend
Posts: 23608
Joined: Wed Jul 02, 2014 12:18 pm
Location: North West Surrey

This forum been hacked?

Post by Mr Tidy » Fri Dec 29, 2017 11:52 pm

Weird! :?

I only ever access the forum on a PC, and thankfully have never had any adverts - apart from the banner ad.
Coupes because stunning!
Current - Silver Grey MC, Imola Red heated Nappa & carbon trim. Aeros, H & R Coil-overs, 224s, OE Strut brace, Nav, cup-holders, DSP Hi-Fi, pdc, cruise, MFSW, no CDV! E90 330i daily
Gone - Montego Blue
Gone - Ruby Black

User avatar
Buckz
Senior Member
Senior Member
Posts: 1112
Joined: Mon Dec 05, 2016 11:00 am
Location: West sussex

This forum been hacked?

Post by Buckz » Sat Dec 30, 2017 12:00 am

Monkeydonkeyratmagic wrote: Fri Dec 29, 2017 10:35 pm Speak of the devil and he shall appear. The url has my location and phone brand and browser type in it and even that I'm with BT. How f***ed up is that.

Screenshot_2017-12-29-21-32-15.png

http://secure.kingmonology.info/swp/uk/ ... 9B100IOA00

Lol at this giant url.
Yup that exact URL pops out for me too.
Image

Lazza
Member
Member
Posts: 488
Joined: Sat Nov 11, 2017 10:42 am
Location: Wokingham

This forum been hacked?

Post by Lazza » Sat Dec 30, 2017 12:30 am

Do you have any anti virus running on your Android devices?
Z4 S-Drive 35i
Audi TT S-line
Mazda MX5 Mk2.5 (for sale)
Wokingham Berkshire

User avatar
Buckz
Senior Member
Senior Member
Posts: 1112
Joined: Mon Dec 05, 2016 11:00 am
Location: West sussex

This forum been hacked?

Post by Buckz » Sat Dec 30, 2017 11:27 am

Seems to be a 2 stage redirect.. first link it hits is digitalmerkat.com which then redirects you to a random spam page be it the above from Asda or others, including sex related content.
Image

Monkeydonkeyratmagic
Member
Member
Posts: 491
Joined: Mon Oct 16, 2017 1:53 pm
Location: Windsor

This forum been hacked?

Post by Monkeydonkeyratmagic » Sat Dec 30, 2017 11:44 am

Lazza wrote: Sat Dec 30, 2017 12:30 am Do you have any anti virus running on your Android devices?
Downloaded malwarebytes... phone is clear. No issues at all.
MR-2 Turbo Rev2

Yep no Z yet. On the hunt.

User avatar
Buckz
Senior Member
Senior Member
Posts: 1112
Joined: Mon Dec 05, 2016 11:00 am
Location: West sussex

This forum been hacked?

Post by Buckz » Sat Dec 30, 2017 12:56 pm

Monkeydonkeyratmagic wrote: Sat Dec 30, 2017 11:44 am
Lazza wrote: Sat Dec 30, 2017 12:30 am Do you have any anti virus running on your Android devices?
Downloaded malwarebytes... phone is clear. No issues at all.
As easy as it would be to point it to your phone.. this is not the case this time, I have 3 android phones and all experience the same issue on this forum only nowhere else. So it must be server side, domain routing or phpbb plugin that picks on android devices only.
Image

User avatar
sp3ctre
Site Admin
Site Admin
Posts: 7492
Joined: Thu Jun 14, 2007 7:29 pm
Contact:

This forum been hacked?

Post by sp3ctre » Sat Dec 30, 2017 1:03 pm

Pretty sure it is not happening to all android devices though, else I would have heard about it more (believe me, when things aren’t working my email box gets lit up!). Do your browsers sync between devices, like chrome does?

There is more to this I think. I have removed one plugin that could have potentially interacted in this way (external plugin), the rest are internal plugins that seem harmless. Only other link is to google adsense, and the blocking pages seem to be down at the moment.
If you are looking for low cost UK insurance, visit our official Z4-forum insurance scheme

User avatar
sp3ctre
Site Admin
Site Admin
Posts: 7492
Joined: Thu Jun 14, 2007 7:29 pm
Contact:

This forum been hacked?

Post by sp3ctre » Sat Dec 30, 2017 1:35 pm

Buckz wrote: Sat Dec 30, 2017 11:27 am Seems to be a 2 stage redirect.. first link it hits is digitalmerkat.com which then redirects you to a random spam page be it the above from Asda or others, including sex related content.
Interesting, the only articles relating to hat domain suggest it is a browser virus:

https://malwaretips.com/blogs/remove-digitalmerkat-com/

Not pointing fingers either way, just trying to get to the bottom of it and there doesn't appear to be anything server side I can find (so far)
If you are looking for low cost UK insurance, visit our official Z4-forum insurance scheme

User avatar
Buckz
Senior Member
Senior Member
Posts: 1112
Joined: Mon Dec 05, 2016 11:00 am
Location: West sussex

This forum been hacked?

Post by Buckz » Sat Dec 30, 2017 1:48 pm

sp3ctre wrote: Sat Dec 30, 2017 1:35 pm
Buckz wrote: Sat Dec 30, 2017 11:27 am Seems to be a 2 stage redirect.. first link it hits is digitalmerkat.com which then redirects you to a random spam page be it the above from Asda or others, including sex related content.
Interesting, the only articles relating to hat domain suggest it is a browser virus:

https://malwaretips.com/blogs/remove-digitalmerkat-com/

Not pointing fingers either way, just trying to get to the bottom of it and there doesn't appear to be anything server side I can find (so far)
I'd agree with you there but I have only experienced it on android device, that malware is known on windows. I have not experienced it anywhere else. Right now for e.g I am using a brand new phone and I've experienced it twice in two days. Not even using chrome in this case, on Firefox browser for android. It doesn't bother me that much as I close the tab and try again when it happens but the fact is that it only happens on this forum and nowhere else. A malware virus would by default target everything.
Image

User avatar
Havard
Senior Member
Senior Member
Posts: 1168
Joined: Sun Oct 05, 2014 7:42 pm
Location: Wigan

This forum been hacked?

Post by Havard » Sat Dec 30, 2017 3:01 pm

I haven't had any problems. Android phone and in Chrome on the laptop.

Too much of those left handed websites I reckon.... :oops:
ImageImage

Post Reply