Closed Thread
Old August 13th, 2010 Top | #1
 
ray_gillespie's Avatar
OSNN Veteran Addict
Joined: March 2002
Location: Birmingham, UK
Posts: 1,692
Reputation: 1420
Power: 155

Default OSNN now exploit free!

Hi guys,

I just tried to load OSNN in Chrome and it came up with a warning message about it being an 'unsafe' site. I've attached the error message.

Strange thing is, I closed the browser and tried again and it went straight in with no problems. Perhaps it's an advertising-based issue?
Attached Thumbnails
OSNN now exploit free!-harmful.jpg  

ray_gillespie is offline  
Old August 13th, 2010 Top | #2
 
Johnny's Avatar
Paul Reed Smith
Joined: January 2004
Location: Happy Valley
Posts: 4,869
Reputation: 2369
Power: 173

Default Re: OSN picked up as 'Harmful'

That is odd. I never got that ...

Paul Reed Smith.
Johnny is offline  
Old August 13th, 2010 Top | #3
 
Aprox's Avatar
OSNN Veteran Addict
Joined: August 2004
Location: California, USA
Posts: 2,735
Blog Entries: 1
Reputation: 2036
Power: 142

Default Re: OSN picked up as 'Harmful'

hmm odd. I didn't see this this morning while at home using Chrome but now checking at work with Chrome I'm seeing the same warning.
Aprox is offline  
Old August 13th, 2010 Top | #4

OSNN Folding Team  
Electronic Punk's Avatar
The Last High
Joined: December 2001
Location: London
Posts: 18,510
Blog Entries: 51
Reputation: 3652
Power: 349

Default Re: OSN picked up as 'Harmful'

Does it give any links to chase down what might be flagging it ?

Electronic Punk is offline  
Old August 13th, 2010 Top | #5
 
dreamliner77's Avatar
The Analog Kid
Joined: March 2002
Location: Red Sox Nation
Posts: 4,653
Reputation: 1111
Power: 182

Default Re: OSN picked up as 'Harmful'

Getting the same thing with Firefox 4.0 beta 3


Reported Attack Page!







This web page at www.osnn.net has been reported as an attack page and has been blocked based on your security preferences.




Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

"You can fight without ever winning, but never win without a fight." -Neil Peart of RUSH

dreamliner77 is offline  
Old August 13th, 2010 Top | #6

OSNN Folding Team  
Electronic Punk's Avatar
The Last High
Joined: December 2001
Location: London
Posts: 18,510
Blog Entries: 51
Reputation: 3652
Power: 349

Default Re: OSNN picked up as 'Harmful'

The Google webmaster pages tell me there was an imbedded iframe like

iframe name="68" width="1" height="1" scrolling="no" frameb
order="no" marginwidth="0" marginheight="0" src="http://www.
xxxxxxxxxxxxx.co.cc/xxxx.php"

(edited) but I can find no reference to it. I can only think it was some malicious ad that got thru one of our providers, but with the information I have there is no way to trace it. Trying to find a way of getting whatever scan found that to update.

Electronic Punk is offline  
Old August 13th, 2010 Top | #7
 
Aprox's Avatar
OSNN Veteran Addict
Joined: August 2004
Location: California, USA
Posts: 2,735
Blog Entries: 1
Reputation: 2036
Power: 142

Default Re: OSNN picked up as 'Harmful'

Here:

Google Safe Browsing diagnostic page for www.osnn.net
Aprox is offline  
Old August 13th, 2010 Top | #8

OSNN Folding Team  
Electronic Punk's Avatar
The Last High
Joined: December 2001
Location: London
Posts: 18,510
Blog Entries: 51
Reputation: 3652
Power: 349

Default Re: OSNN picked up as 'Harmful'

Yup, I have a friend of a friend who works at Google in that department so trying to find out what page(s) that code is appearing on because I just can't see it.
If it is from the adverts it will till be a nitemare to trace, but it will mean that OSNN itself is not compromised in any way.

Electronic Punk is offline  
Old August 13th, 2010 Top | #9
 
Johnny's Avatar
Paul Reed Smith
Joined: January 2004
Location: Happy Valley
Posts: 4,869
Reputation: 2369
Power: 173

Default Re: OSNN picked up as 'Harmful'

I am seeing it now. Only on firefox though. Internet Explorer doesn't show it. Firefox won't even allow me to log into the site.

Paul Reed Smith.
Johnny is offline  
Old August 13th, 2010 Top | #10
Xie

OSNN Subscriber
OSNN Folding Team  
Xie's Avatar
- geek -
Joined: September 2003
Location: NY, USA
Posts: 5,224
Reputation: 1730
Power: 175

Default Re: OSNN picked up as 'Harmful'

Just saw this myself, the notice said the site itself was not infected though.

tehgeek | tehgeek | geeking out to tech | IRC | *Parted Magic* | A+ Certified Professional

Xie is offline  
Old August 13th, 2010 Top | #11

OSNN Folding Team  
Sazar's Avatar
F@H - Is it in you?
Joined: April 2002
Location: Between Austin and Tampa
Posts: 14,888
Reputation: 4110
Power: 313

Default Re: OSNN picked up as 'Harmful'

Originally Posted by ray_gillespie View Post
Hi guys,

I just tried to load OSNN in Chrome and it came up with a warning message about it being an 'unsafe' site. I've attached the error message.

Strange thing is, I closed the browser and tried again and it went straight in with no problems. Perhaps it's an advertising-based issue?
I've been getting that all day today.

I also received some kind of plug-in request when I visited here.

What's going on
Sazar is offline  
Old August 14th, 2010 Top | #12
 
Aprox's Avatar
OSNN Veteran Addict
Joined: August 2004
Location: California, USA
Posts: 2,735
Blog Entries: 1
Reputation: 2036
Power: 142

Default Re: OSNN picked up as 'Harmful'

Aprox is offline  
Old August 14th, 2010 Top | #13

OSNN Folding Team  
Electronic Punk's Avatar
The Last High
Joined: December 2001
Location: London
Posts: 18,510
Blog Entries: 51
Reputation: 3652
Power: 349

Default Re: OSNN picked up as 'Harmful'

Can you get me more info on that plugin request?

Electronic Punk is offline  
Old August 14th, 2010 Top | #14
 
American Zombie's Avatar
OSNN Veteran Addict
Joined: June 2004
Location: Seattle
Posts: 2,864
Reputation: 2689
Power: 151

Default Re: OSNN picked up as 'Harmful'

I have seen other sites doing the same thing the past few days.

Example is Pirate Bay being flagged.

I really do not put all my faith in what Google says.
American Zombie is offline  
Old August 14th, 2010 Top | #15

OSNN Folding Team  
Sazar's Avatar
F@H - Is it in you?
Joined: April 2002
Location: Between Austin and Tampa
Posts: 14,888
Reputation: 4110
Power: 313

Default Re: OSNN picked up as 'Harmful'

Originally Posted by Electronic Punk View Post
Can you get me more info on that plugin request?
Haven't seen it again since I said, don't flag this site.

It's annoying but not a deal-breaker.

For others visiting this place, it could be a different story.

I am getting flagged everytime I start Chrome from scratch (since I have the Speed Dial extension) haven't checked other browsers yet.
Sazar is offline  
Old August 14th, 2010 Top | #16
 
Johnny's Avatar
Paul Reed Smith
Joined: January 2004
Location: Happy Valley
Posts: 4,869
Reputation: 2369
Power: 173

Default Re: OSNN picked up as 'Harmful'

I can't do anything with this site on firefox or chrome. It only works with IE.

This is what I get with firefox:

Safe Browsing

Diagnostic page for OSNN - Windows, Linux and Macintosh News


What is the current listing status for OSNN - Windows, Linux and Macintosh News
Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
What happened when Google visited this site?
Of the 24 pages we tested on the site over the past 90 days, 4 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-08-13, and the last time suspicious content was found on this site was on 2010-08-13.Malicious software is hosted on 4 domain(s), including atnews.in/, mmgate.in/, protection-business.in/.
1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including ytolkasa.co.cc/.
This site was hosted on 1 network(s) including AS21844 (THEPLANET).
Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, OSNN - Windows, Linux and Macintosh News did not appear to function as an intermediary for the infection of any sites.
Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.
How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
Next steps:
It is the adds you have on here. I also noticed a plug in request as well. When selected, it wanted me to install quicktime, which I don't have and wont install.

Paul Reed Smith.
Johnny is offline  
Old August 14th, 2010 Top | #17
Xie

OSNN Subscriber
OSNN Folding Team  
Xie's Avatar
- geek -
Joined: September 2003
Location: NY, USA
Posts: 5,224
Reputation: 1730
Power: 175

Default Re: OSNN picked up as 'Harmful'

Originally Posted by Johnny View Post
... I also noticed a plug in request as well. When selected, it wanted me to install quicktime, which I don't have and wont install.
I highly doubt it was really QuickTime it wanted you to install, I'd put $ on it being a virus/trojan. These new breed of infections trick you into thinking you need to install a plugin for something and your installing the malware for them. Also I wouldn't suggest coming here with IE if the ads are in fact auto installing things like the Google malware warning states.

tehgeek | tehgeek | geeking out to tech | IRC | *Parted Magic* | A+ Certified Professional

Xie is offline  
Old August 14th, 2010 Top | #18

OSNN Folding Team  
Electronic Punk's Avatar
The Last High
Joined: December 2001
Location: London
Posts: 18,510
Blog Entries: 51
Reputation: 3652
Power: 349

Default Re: OSNN picked up as 'Harmful'

I managed to get a plugin thing pop up once but it was on the Firefox beta so wasn't being too helpful.

Electronic Punk is offline  
Old August 14th, 2010 Top | #19

OSNN Folding Team  
Electronic Punk's Avatar
The Last High
Joined: December 2001
Location: London
Posts: 18,510
Blog Entries: 51
Reputation: 3652
Power: 349

Default Re: OSNN picked up as 'Harmful'

I believe the particular ads on the frontpage (I assume its happening on the frontpage) are:

http://www.osnn.net/adverts/bannerconnect_728x90.html
http://www.osnn.net/adverts/casale_160x600.html
http://www.osnn.net/adverts/bannerconnect_468x60.html
http://www.osnn.net/adverts/bannerconnect_160x600.html

The code from
http://www.osnn.net/adverts/burst_120_160x600.html
http://www.osnn.net/adverts/burst_728x90.html
http://www.osnn.net/adverts/burst_468x60.html may also be in there

Basically if anyone can get any of Index of /adverts to bite then it will be easier to track this down.

They could be geo-targetted which makes it even harder for me to find the damn thing.

Electronic Punk is offline  
Old August 14th, 2010 Top | #20
 
American Zombie's Avatar
OSNN Veteran Addict
Joined: June 2004
Location: Seattle
Posts: 2,864
Reputation: 2689
Power: 151

Default Re: OSNN picked up as 'Harmful'

Tried all the ads...no warnings.

I still feel this is a false warning as it would not be the first time concerning Chrome and Firefox.

There was a discussion back in 2009 about this in the webmaster portion of Google help.

http://www.google.com/support/forum/...ff1238c0&hl=en
American Zombie is offline  

Closed Thread

Bookmarks

Thread Tools

Posting Rules

Similar Threads
Thread Thread Starter Forum Replies Last Post
PHP Exploit query LordOfLA Web Design & Coding 14 December 8th, 2008 1:35pm
new ie exploit perris Windows Desktop Systems 7 December 23rd, 2003 11:51am
New Exploit Invision Windows Desktop Systems 30 October 8th, 2003 6:01pm
Another RPC exploit thread NetRyder Windows Desktop Systems 18 August 13th, 2003 4:23pm