Author Topic: Defacement hack and adware script injection?  (Read 1876 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33916
  • malware fighter
Defacement hack and adware script injection?
« on: December 09, 2014, 07:38:00 PM »
Re: http://killmalware.com/demonfit.com/
See: <meta content="Hacked by people_hurt name=" description'="">'=""> when you copy you won't get '=""
Detected as Trojan.Script.Heuristic-js.iacgm.
Flagged by Sucuri's: http://sitecheck.sucuri.net/results/www.demonfit.com/
A misused ir defaced server also listed by MX: http://support.clean-mx.de/clean-mx/portals.php?ns3=ns3.cdmon.net&sort=id%20desc&response=alive
See the long OVERDUE! malcode running from these IP domains (158 domains on one and the same IP).
Found in the past: http://www.projecthoneypot.org/ip_134.0.14.63
Script inject from -cfs.u-ad dot info/cfspushadsv2/request (a scan with MBAM is advisabkle)

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33916
  • malware fighter
Re: Defacement hack and adware script injection?
« Reply #2 on: December 09, 2014, 10:28:56 PM »
Hi Pondus,

As demonstrated here avast well ahead of the competition here!
Good we have this protection....

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!