Possible forum security compromise?


all_hell

 

Posted

Tried going to the following link from the Dev Digest:

http://boards.cityofheroes.com/showt...51#post3982651

Received the following warning (using Google Chrome):

Quote:
boards.cityofheroes.com contains content from pyrox37.webng.com, a site known to distribute malware. Your computer might catch a virus if you visit this site.
Google has found malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed, and perhaps try again tomorrow or go somewhere else.
We have already notified pyrox37.webng.com that we found malware on the site. For more about the problems found on pyrox37.webng.com, visit the Google Safe Browsing diagnostic page.
Is anyone else seeing similar warnings on their browsers on any other pages, or is it just perhaps a bad signature picture or other item on this particular thread?


 

Posted

Aye, I did on Chrome from your link.


 

Posted

It is this user's avatar being hosted on the webng.com domain.

It appears to be just another free webhost, but poorly policed free webhosts are often used for malware distribution, presumably hence the warnings.


Omnes relinquite spes, o vos intrantes

My Characters
CoX Chatlog Parser
Last.fm Feed

 

Posted

Getting the identical message from Chrome.

Anyone know what Zwill said in that possibly hacked post?


50s: Inv/SS PB Emp/Dark Grav/FF DM/Regen TA/A Sonic/Elec MA/Regen Fire/Kin Sonic/Rad Ice/Kin Crab Fire/Cold NW Merc/Dark Emp/Sonic Rad/Psy Emp/Ice WP/DB FA/SM

Overlord of Dream Team and Nightmare Squad

 

Posted

Quote:
Originally Posted by Bionic_Flea View Post
Getting the identical message from Chrome.

Anyone know what Zwill said in that possibly hacked post?
It's just the person in the thread below him's signature banner. Apparently it's hosted on an unsafe site. But I'm pretty sure it's harmless to forumgoers, unless you click his signature link and go wandering around that site.



10 50's To Date! Check out Titan Sentinel; it got my CoH presence synced online

 

Posted

yeah, it's Saberdon's Avatar


 

Posted

Quote:
Originally Posted by all_hell View Post
yeah, it's Saberdon's Avatar
Pyrox is an SG mate. I've PMed him and and posted to our GP site. He'll see it today.


"He may be arrogant, but he happens to be correct" - Ellis
"The server is full of crazies" - New_Dark_Age

Rainbow Arcana / Diamond D: Legion of Freedom - Virtue
lof.guildportal.com

 

Posted

Derp. My bad. All better now.

EDIT: I didn't even know I still had anything linked from that host. I thought I moved everything over to photobucket.


 

Posted

Just glad to know it wasn't related to the recent forum issues. Thanks Pyrox, everything checks out fine now