This forum been hacked?

Now I'm getting this error message:



Only get error messages and adverts like that on this webpage
 
Now I'm getting this error message:



Only get error messages and adverts like that on this webpage
 
Tcochrane92 said:
sp3ctre said:
What part of the forum were you on at the time? Did it appear when you were on a page or when you clicked a link?

I loaded the New Posts page directly from a Bookmark saved on my phone (didn't navigate there from Z4 homepage)

Same here, I have a bookmark for new posts and thats how I get to the forum, wouldn't surprise me if it's that link only.
 
Tcochrane92 said:
Now I'm getting this error message:

Don't worry about that, that was my fault... oops!

Worth removing those bookmarks and setting them up again? Seems to be a common theme.
 
Tcochrane92 said:
Just got this.

Link it took me to was this:

http://secure.kingmonology.info/swp/uk/mtp/q/gt/asdav_na.html?brand=Samsung&volid=aps478&src=b2o&model=Galaxy%20S8%2B&os=Android&xyz=19210-_rIEzOnZY0Q6.OQanrxc&ckk=n&ld=GB&ip=86.149.142.177&browser=Chrome%20Mobile&city=Woking&isp=British%20Telecommunications%20Plc&camp=f59ebbdd-501d-4795-b25f-d1110ae7d17d&lander=e9f62b72-d762-40c0-9d11-22f2f3589110&dt=y&voluumdata=deprecated&eda=deprecated&cep=nra0ec2ypBYQtcQHWK3NAZhQtTNLACeB5peH0C5qRfB_D8HJKBd9PrNI7AsX7mCtXrtoxdZu-sixngEkFnqpBEZSe8Ug7XXzn1yPpykxseHtapDZJqWlR12PR4z50um6VbNwEMGiZbypX3DetXEShNUnFA72BuUtixJqR4uaWwdv9-a_P82-3OZtu9IaME6BzNCR4S9B8me22Yu1bcsb4xvNJ_jz7EMZAP_6wGJHwYOSL1YkouDSXDZBgtV8xVNzdF8Xa0bGDDN2knyHXGbc7gv5WJEHYDjIjgDdqZ3lk9U&externalid=kGB2576U01MTQ01003AR0ULMP00IOAWF0MAN1V866dBD02KL00IOA00

And got this message:
SmartSelectImage_2017-12-30-19-24-44.png

Hope that helps

I'm also getting this one, plus the Asda gift card one. Only on this forum and also installed avast.and everything clear on my phone.

Chrome on Android. No particular areas of the forum and it's very random when it happens. Don't get this on any other websites
 
I have never used Android so I'm not sure what is possible, but is it possible to get a "page source" of the page where the popup originates from (the new posts screen, it seems)? I can't find any reference to these sites in the code, and I cannot replicate it on Windows, Mac OS or IOS.
 
Sure, I'll hook up to the android SDK next time I get it and see what info I can get
 
greg81 said:
Sure, I'll hook up to the android SDK next time I get it and see what info I can get

Appreciated. Difficult to diagnose when I don’t have access to the platform.
 
Funnily enough I've not seen this in the past few days. May well be related to the ssl cert you've installed. Will keep an eye on it still
 
greg81 said:
Funnily enough I've not seen this in the past few days. May well be related to the ssl cert you've installed. Will keep an eye on it still

That was one of the reasons for doing it. Fingers crossed, let me know how it goes :thumbsup:
 
Bad news I'm afraid, I got one of these tonight.

I'm almost certain it's a dodgy ad misbehaving from your as supplier but I couldn't get back to see what it might have been causing it.

History shows it originating from z4forum...

I had a quick search up on "rgshark" and there's other forums experiencing the same issues so might be worth checking to see what ad suppliers they use

https://www.whois.com/whois/rgshark.com - a Chinese firm by the looks of it
 

Attachments

  • Screenshot_20180104-193120.png
    Screenshot_20180104-193120.png
    65.2 KB · Views: 3,849
  • Screenshot_20180104-193129.png
    Screenshot_20180104-193129.png
    94.2 KB · Views: 3,849
  • Screenshot_20180104-193146.png
    Screenshot_20180104-193146.png
    118.1 KB · Views: 3,849
Same issues report here: https://www.google.co.uk/url?sa=t&source=web&rct=j&url=https://www.railforums.co.uk/threads/rail-forums-co-uk-redirecting-to-wiserapps-site-false-virus-alerts.158556/&ved=0ahUKEwi24buxib_YAhVlK8AKHYocA58QFgg4MAY&usg=AOvVaw2om9N4aWZbPOvxabs4ATYB
 
mmm interesting, seems a lot of forums are having the same, and not necessarily using the same software either. Free Life Membership to the first person to get to the bottom of this!
 
I'm still getting it on this forum, appears randomly it seems with random selections

For the moment I would recommend not writing any personal information on the site until the bug is fixed, need know what its intentions are. That includes in private messages, mobile numbers, full names, home addresses, bank details etc
 
For what it's worth I don't think this is actually a severe issue. It's basically just an old-school popup that manifests itself as a browser hijack and because it's on mobile it appears to be malicious.

That said you should never be sharing any personal information on any website regardless of potential threats such as this as a rule of thumb!
 
greg81 said:
For what it's worth I don't think this is actually a severe issue. It's basically just an old-school popup that manifests itself as a browser hijack and because it's on mobile it appears to be malicious.

That said you should never be sharing any personal information on any website regardless of potential threats such as this as a rule of thumb!

Sound advice :thumbsup:
 
Back
Top Bottom