Malware Injection

[Ellie Mors]

• Short Description: Clicking a link to SWRP from google search leads to an adult website (malware) rather than the actual website.
• Browser: Chrome Version 43.0.2357.124 m
• Severity: All profiles
• Description: Searching for something on google that leads to SWRP and then clicking on one of the results that would bring you to SWRP instead redirect to an adult website, again malware.
• Screenshots: NSFW Soooo, yeah. Not going to post a picture.
• Link to Thread: PM for request. Or skype.

 

[Pavor Clauditis]

Does this website happen to be called URL4SHORT?

[member="Lily Kirsche Kuhn"]

 

[Ellie Mors]

Does this website happen to be called URL4SHORT?

[member="Lily Kirsche Kuhn"]

Well, not originally, but this just happened to happen again... and this time it was url4short. I'm still not going to link this, (this one I just x'd out of the window), but it's happened twice now in about fifteen minutes. Scanned my pc with windows defender and malwarebytes, neither have shown anything.

 

[Pavor Clauditis]

Yes, I've had the same problem. It just happened to me around five minutes ago when I logged in. Url4short is a browser hijacker but can still cause damage to your computer. I'm sure you can find a tutorial somewhere if you just google it as I have. For me, it appears randomly, not appearing for long periods of time. I'd suggest trying to find a tutorial on how to remove it as soon as possible as Url4short, as you mentioned the adult website, can be found on adult websites. I recall reading that only a few programs can detect Url4short. It can change things like your desktop background but can cause more severe problems. Again, I'd suggest searching for a tutorial as soon as possible.

[member="Lily Kirsche Kuhn"]

 

[GhostOfProtocol]

Just tried this, yeah I got hit with it. Lets just say I crossed off quicker than i've ever crossed in my life. That stuff is not safe for kids, or this websites.

 

[Kyla Foy]

[member="Lily Kirsche Kuhn"] Check your plugins sometimes a random malware plugin installs itself.

 

[Torvas]

I recommend adding this line to your HOSTS file if you're familiar with how to do that:

0.0.0.0 url4short.info

That will prevent it from loading up. This is a good tutorial if you're not familiar with how to do so:

http://www.howtogeek.com/howto/27350/beginner-geek-how-to-edit-your-hosts-file/

Also [member="Lily Kirsche Kuhn"] if you're on Windows make sure you don't have any extra startup programs.

You might want to check out our thread here:

http://starwarsrp.net/topic/48244-remaining-vigilant-swrp-vulnerability-exploited/page-3

 

[Ellie Mors]

I recommend adding this line to your HOSTS file if you're familiar with how to do that:

0.0.0.0 url4short.info

That will prevent it from loading up. This is a good tutorial if you're not familiar with how to do so:

http://www.howtogeek.com/howto/27350/beginner-geek-how-to-edit-your-hosts-file/

Also [member="Lily Kirsche Kuhn"] if you're on Windows make sure you don't have any extra startup programs.

You might want to check out our thread here:

http://starwarsrp.net/topic/48244-remaining-vigilant-swrp-vulnerability-exploited/page-3

I was aware of the issue and reasons, I was asked to post this here as a reminder/notice. Thanks for the tip on host files, though.

 

[Torvas]

Ah, real sorry, didn't mean to just blurt out stuff you already knew, but I'm glad the one tip was useful [member="Lily Kirsche Kuhn"] ^^;