Topic Sponsor
Suggestions, Comments & Questions about the Forum Give us your feedback and tell us what you'd like to see or report a functionality problem.

Malware Found

Old 02-07-2019, 10:30 AM
  #1  
Scoundrel
Thread Starter
 
HangDiver's Avatar
 
Join Date: May 2018
Location: Montrose, Colorado
Posts: 442
Received 154 Likes on 108 Posts
Default Malware Found

Hello,
I'm trying to find a way to contact admins re: Malware on this website. When I visit this site I continue to get a pop-up that takes over my window requesting that I update Flash Player for safari (I'm using a mac). The address that it wants me to go to is: https://flash-playerupdate.icu/K5amC...40RE7K1O36NF86

This only occurs on this website (F150Forums.com). I believe one of the users has an infected computer and is unknowingly spreading this. Hopefully you can find this file and isolate it as it makes using these forums very difficult.

Thank you,
Rich J.

The following 2 users liked this post by HangDiver:
IB Jose (02-07-2019), Texas3 (08-04-2019)
Old 02-07-2019, 10:57 AM
  #2  
Senior Member
 
Blue2016XL's Avatar
 
Join Date: Jul 2017
Posts: 2,226
Received 1,039 Likes on 652 Posts

Default

Already reported here:

https://www.f150forum.com/f80/mac-us...4-19-a-438461/
The following 2 users liked this post by Blue2016XL:
HangDiver (02-07-2019), IB Jose (02-07-2019)
Old 02-07-2019, 11:29 AM
  #3  
Scoundrel
Thread Starter
 
HangDiver's Avatar
 
Join Date: May 2018
Location: Montrose, Colorado
Posts: 442
Received 154 Likes on 108 Posts
Default

Thank you and sorry for the repost...
Old 02-07-2019, 11:33 AM
  #4  
Senior Member
 
Blue2016XL's Avatar
 
Join Date: Jul 2017
Posts: 2,226
Received 1,039 Likes on 652 Posts

Default

Originally Posted by HangDiver
Thank you and sorry for the repost...
No worries. Sorry I made it sound like I was bashing you for. Was just pointing it out.
Old 02-07-2019, 11:40 AM
  #5  
Scoundrel
Thread Starter
 
HangDiver's Avatar
 
Join Date: May 2018
Location: Montrose, Colorado
Posts: 442
Received 154 Likes on 108 Posts
Default

I didn't think you were bashing at all....
The following users liked this post:
Blue2016XL (02-07-2019)
Old 02-07-2019, 09:57 PM
  #6  
Senior Member
iTrader: (1)
 
nerdh3rd's Avatar
 
Join Date: May 2014
Posts: 1,024
Received 177 Likes on 132 Posts

Default

I don’t think anyone is spreading malware via the website (in fact, in my 20 years in IT, I have not heard of that happening peer to peer over a public website). The pop up is an Ad that goes to a website hosting potential malware. I will say that it’s sad that the forum is partnering with an Ad agency that will link people to malware, though.
The following 3 users liked this post by nerdh3rd:
N4HHE (02-11-2019), RLXXI (02-08-2019), techrep (02-08-2019)
Old 02-11-2019, 02:40 PM
  #7  
IB Staff
 
IB Jose's Avatar
 
Join Date: Dec 2013
Posts: 419
Received 84 Likes on 64 Posts
Default

Originally Posted by nerdh3rd
I don’t think anyone is spreading malware via the website (in fact, in my 20 years in IT, I have not heard of that happening peer to peer over a public website). The pop up is an Ad that goes to a website hosting potential malware. I will say that it’s sad that the forum is partnering with an Ad agency that will link people to malware, though.

We obviously don't wish to partner with agencies that do this---and almost all of the time, the agencies themselves don't know it either. Most of our ads are run through Google or Amazon's ad platforms, and those ads are very clean, filtered aggressively so their numbers remain stable.

The remaining 20-30% of our ads are run through a variety of other platforms, and some of those platforms re-sell the inventory they bought from us to fill the slots as they see fit, and sometimes it's the re-sold ads with numerous middle-men in between that might be infected in malware. It's unfortunately become the nature of the online ad business where these in-between transactions can be targeted by bad actors masquerading as legitimate businesses.
Old 02-11-2019, 04:13 PM
  #8  
Senior Member
 
N4HHE's Avatar
 
Join Date: Jan 2019
Location: Madison, AL
Posts: 1,531
Received 605 Likes on 400 Posts
Default

The sad thing for the site when malware ads are slipped in is that it encourages users to install ad blockers.
Old 08-01-2019, 11:13 AM
  #9  
Senior Member
 
evofxdwg's Avatar
 
Join Date: May 2016
Posts: 130
Received 21 Likes on 18 Posts
Default

Originally Posted by IB Jose
We obviously don't wish to partner with agencies that do this---and almost all of the time, the agencies themselves don't know it either. Most of our ads are run through Google or Amazon's ad platforms, and those ads are very clean, filtered aggressively so their numbers remain stable.

The remaining 20-30% of our ads are run through a variety of other platforms, and some of those platforms re-sell the inventory they bought from us to fill the slots as they see fit, and sometimes it's the re-sold ads with numerous middle-men in between that might be infected in malware. It's unfortunately become the nature of the online ad business where these in-between transactions can be targeted by bad actors masquerading as legitimate businesses.
Well its still happening. I sent the following to phishing@adobe.com today:
A popup for suspected fake flash player update opens on my Mac OS/Safari. It only happens on a specific forum website I frequent. It is likely associated with one of the many Ads on the page. Here is the URL of that popup.
https://fixheavilyquickproduct.icu/b...Flash%20Player

Here is one specific forum post it has been happening on lately. It doesn’t happen every time opened but maybe 50% of the time.
https://www.f150forum.com/f30/amp-lo...ro-con-452953/
----------------
F150 Forum is the only site in recent memory that this popup happens on my Mac.
If it happens to you, please report it to Adobe at the above email address and F150 forum (not sure if there is an email address or it has to be in a post).
Can the F150 forum administrator do anything about it?
The following 2 users liked this post by evofxdwg:
IB Jose (08-05-2019), Texas3 (08-04-2019)
Old 08-05-2019, 01:25 PM
  #10  
IB Staff
 
IB Jose's Avatar
 
Join Date: Dec 2013
Posts: 419
Received 84 Likes on 64 Posts
Default

Hi folks.

Same as it's been since the beginning of the year. The number of these types of ads have been reduced since we partnered with a third-party scan service, but they do still sometimes slip by.


Generally we file a report with these guys, but generally by the time we have everything set up and filtered--the nature of these ads is that they expire very quickly, or rotate to new URLs very quickly as well.

It is great to have reports like this for reference, and it does help us to be a little more alert about these since the pattern for these ads is that they occur in waves across a few of our sites at once.
The following users liked this post:
SPOAT (08-05-2019)


Thread Tools
Search this Thread
Quick Reply: Malware Found



All times are GMT -4. The time now is 07:37 PM.