Malware on the forum??? - Page 6 - SV650.org

12-03-12, 07:23 PM

Quote:

Originally Posted by yorkie_chris

These pr*cks should have their heads kicked in, there must be some way someone could plausibly find out where they live?

Yep, these deserve it more than most.

andrewsmith · 12-03-12, 07:24 PM

Quote:

Originally Posted by yorkie_chris

These pr*cks should have their heads kicked in, there must be some way someone could plausibly find out where they live?

Back tracing the ISP through the emails- doable if your CIA, MI6, NSA

12-03-12, 07:25 PM

Quote:

Originally Posted by wyrdness

It looks like a DNS spoofing attack to me.

Looks more like compromised server. The '302 Found' is a web server redirect code (Moved Temporarily).

There's quite a few ways this can happen but the one we see most often is a hacked .htaccess file in the root directory. Have recently see them with several 'conditions' required for the redirect to fire, which would explain randomness.

Messie · 12-03-12, 07:32 PM

Keep calm and carry on. I'm sure our Ubermeistertsm is sorting it as we speak

12-03-12, 07:37 PM

Quote:

Originally Posted by Terah

Looks more like compromised server. The '302 Found' is a web server redirect code (Moved Temporarily).

There's quite a few ways this can happen but the one we see most often is a hacked .htaccess file in the root directory. Have recently see them with several 'conditions' required for the redirect to fire, which would explain randomness.

I did wonder if it was a compromised server because of the 302. However, the server that's redirecting is on a different ip address to the org's current ip. Also the way that some people are seeing it and not others, or at different times, would indicate that it's a dns attack, due to the way that dns changes propagate around the net.

timwilky · 12-03-12, 07:50 PM

If you are suffering, try setting your DNS server to the public google one at 8.8.8.8.

Won't be fast but should be reasonably reliable

12-03-12, 07:53 PM

Sorry wyrdness you're quite right - I hadn't read your post properly.

sv4me · 12-03-12, 07:54 PM

Quote:

Originally Posted by Terah

Looks more like compromised server. The '302 Found' is a web server redirect code (Moved Temporarily).

There's quite a few ways this can happen but the one we see most often is a hacked .htaccess file in the root directory. Have recently see them with several 'conditions' required for the redirect to fire, which would explain randomness.

Quote:

Originally Posted by wyrdness

I did wonder if it was a compromised server because of the 302. However, the server that's redirecting is on a different ip address to the org's current ip. Also the way that some people are seeing it and not others, or at different times, would indicate that it's a dns attack, due to the way that dns changes propagate around the net.

I love it when you guys talk geek to me

dizzyblonde · 12-03-12, 08:03 PM

So I'm one of the lucky ones that hasn't been affected yet.

#hides before it does#

12-03-12, 08:27 PM

had it all saturday night! right pain in the ar5e! seems to be sorted for now though.

12-03-12, 07:32 PM	#54
Messie The Teacer Mega Poster Join Date: Jun 2004 Location: colchester Posts: 2,739	Re: Malware on the forum??? Keep calm and carry on. I'm sure our Ubermeistertsm is sorting it as we speak __________________ There's a fine line between a hobby and a mental illness

12-03-12, 07:50 PM	#56
timwilky Member Mega Poster Join Date: Mar 2004 Location: Not in Yorkshire. (Thank God) Posts: 4,116	Re: Malware on the forum??? If you are suffering, try setting your DNS server to the public google one at 8.8.8.8. Won't be fast but should be reasonably reliable __________________ Not Grumpy, opinionated.

12-03-12, 07:53 PM	#57
Terah Guest Posts: n/a	Re: Malware on the forum??? Sorry wyrdness you're quite right - I hadn't read your post properly.

12-03-12, 08:03 PM	#59
dizzyblonde Da Cake Boss Mega Poster Join Date: May 2007 Location: On a flying Horse Posts: 9,992	Re: Malware on the forum??? So I'm one of the lucky ones that hasn't been affected yet. #hides before it does# __________________ Suzy, yellow 2001 SVS. Kitty, V-Raptor 1000, ZZR1400<<its my bike now Pegasus! Hovis 13.8.75-3.10.09 Reeder 20.7.88-21.3.12

12-03-12, 08:27 PM	#60
aaron020873 Guest Posts: n/a	Re: Malware on the forum??? had it all saturday night! right pain in the ar5e! seems to be sorted for now though.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
New to the Forum	Big_G	SV Talk, Tuning & Tweaking	3	26-11-07 11:36 PM
UK R6 forum ??	Stormspiel	Idle Banter	9	27-07-06 01:57 PM
forum	sv650s_guy	SV Talk, Tuning & Tweaking	6	30-01-06 10:58 AM