Firefox, ATTACK SITE warning

bignred05

I have been using a certain web site for several years (techwatch) with any problems what so ever

btw as the title states I using the latest version of Firefox

well tonight when I log into techwatch I get a red warning page from firefox stating ATTACK SITE followed by a warning about possible attacks from this site

the odd thing is I've been using it for several years and have yet to have any problems, anyone explain what is going on

thanks in advance

alanrowell

Google doesn't like it either

RussJK

It's been infected with a malware script, probably in response to the "lizamoon not as widespread as first thought" story it published last week. Just as the 'why was this page blocked' page says, the script sends you to known malware sites with domains ending in .cc in order to download malware.

Techwatch will fix it, and hopefully fix the security holes. This is just what life on the net is going to be like now. Maybe Noscript is looking a bit better...

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://www.techwatch.co.uk/

bignred05

just a further point, like I said above I use this site on a daily basis for the last several years (without any problems)

I also scan by PC 2 or 3 times a week with Microsoft windows essentials, also with Malwarebytes

nothing ever appears from techwatch, hence the confusion tonight

Thanks

23n1th

Just went there to see if it would infect me, no joy, maybe its ablocker blocking the malware???

bignred05

RussJK wrote: »

By the way, remove the link! People might click on it and get infected.

apologies & done (although I'm confused as I don't think I'm infected)

23n1th

It seems to be fixed now anyway, can't get infected on xp with no security installed.

bignred05

23n1th wrote: »

It seems to be fixed now anyway, can't get infected on xp with no security installed.

mines not working still on Firefox, just tried on I/E

and got this message (suppose it explains things)


Many apologies for the issues with the Techwatch forums today (10/05/2010) - the site has sustained a serious malware attack and it's proving difficult to remove everything in good time. Everytime it looks as though I've removed one exploit, another one appears. As my own business PC has already become infected trying to tackle this (thanks, McAffee!) I think it's unfair to keep the TW forums online while they risk infecting member machines. I'm going to be working on repairing the site tonight and tomorrow morning, after which I hope to get everything up and running clean again. In the meantime, many thanks for your patience - Brian.

RussJK

23n1th wrote: »

It seems to be fixed now anyway, can't get infected on xp with no security installed.

Think you're right. If you're that curious, you can go to the links mentioned on the block page

Bit redundant now, but ran the html code of techwatch through http://www.selfseo.com and I couldn't find any dodgy scripts in it, and the java code didn't have anything that stood out as obviously dodgy. I should point out that the last time I wrote a website was more than ten years ago, and that I have no grounding in java code.

debitcardmayhem

RussJK wrote: »

Think you're right. If you're that curious, you can go to the links mentioned on the block page

Bit redundant now, but ran the html code of techwatch through http://www.selfseo.com and I couldn't find any dodgy scripts in it, and the java code didn't have anything that stood out as obviously dodgy. I should point out that the last time I wrote a website was more than ten years ago, and that I have no grounding in java code.

Couldn't have been you then Russ, me neither my ISP been threepenny bits up last 1 1/2 hours average d/l speed been .25-.40 Mbps :mad:

RussJK

debitcardmayhem wrote: »

Couldn't have been you then Russ

I hacked the mainframe!
...and all I had to do was mash the keyboard randomly!

(then they reversed the hack, and made sparks come out of my monitor)