Cyberattack on the forum

Alright, look. Every single time I try to load this site, before I even get a chance to log in, McAfee throws this error at me:

norton blocked an attack by: Cyberattack: malicious toolkit website 9

I’m asking the admins to please check in with whoever manages the server here to see what's going on. Or maybe my antivirus is just acting crazy. When I first saw this message, I immediately ran a full system scan on my PC, but everything seems fine as far as that goes.

Thanks in advance for any help.

Check this out...

I don't have any issues so far—fingers crossed it stays that way.

This popped up on my screen last night
I had just opened Facebook, YouTube, and the forum

http://img717.imageshack.us/img717/5...benanntvlf.jpg

Since we’re already calling out the admins here, I’ve got a quick question for them. Why on earth am I still seeing what look like deleted threads?
Exhibit A:
Okay, so look, there's a bigger picture to this situation here...
All I'm seeing is a link to the thread, but whenever I try to actually click through and read it, nothing happens.

The person responsible for clearing those out messed up and left redirects behind. These can be permanent or set to expire. If they don't clear out on their own after a while, just send a PM to the moderator over there to get them removed.

For the past few days, I’ve been getting an alert from my antivirus about once a day whenever I load the homepage of this or any other subforum. It claims a virus tried to breach my computer just by loading the page.

The interesting part is how sophisticated this thing is. You don't even have to click a suspicious link; it basically sneaks in automatically just by browsing the website.

Luckily, my resident antivirus software catches it every time, but I’m certain at least half of the users out there don't have protection strong enough to stop this. If they did, they’d probably be posting about it here just like I am.

My theory is that it's some kind of malicious ad disguised as a Java applet that tries to slip through the back door into our systems.

Here are the details...
Virus Name:
JS/Kryptik.CJ Trojan

Website where the ad originates:
http://stena.in/main.php?page=3bc57ebe0d6e1079

That's all I've got. I really hope the admins and moderators can step in and put an end to this virus.

You can find more details about that here.

Just a quick heads-up; it looks like there might be a virus on this site. My antivirus flagged it right here on the forum about ten days ago, and now it's popping up again just as I'm trying to log in. Trojan is what it's calling it.

Thanks for looking into this.

I honestly don't even know where else to turn with this one... does anyone recognize what this is: ?
It looks just like our usual forum, but for some reason, it just wouldn't let me log in—which, looking back, I didn't even realize was happening because I hadn't noticed the URL was different in the first place... (I actually stumbled onto it while I was digging through some stuff on Google and it just popped up in the results)

Elizabeth Davis52 said:I honestly don't know where else to ask this... what on earth is this site?
It looks exactly like our forum, but for some reason, it wouldn't let me log in. I didn't even realize it had a different URL at first... (I just stumbled onto it while searching for something on Google)

That's interesting. It won't let me log in either, and it's an identical clone of this forum.😕

It’s probably just a backup site or some forum they set up for testing stuff.

brighttinker48 said:It’s likely just a backup site or some kind of staging forum for testing purposes.

I think your theory actually holds water.

AFAIK, Orbis is just the company hosting our servers, and honestly, it’s pretty standard for a massive site like this to have mirrors. 😉

Besides, we've already gone over this before.

So, I’m trying to get onto the main forum landing page, right? And everything seems fine for maybe three or four seconds, but then out of nowhere, it just forcibly redirects me straight to some sketchy gambling site or an online sportsbook. It’s super annoying.
I tried to go ahead and block that specific site through my browser settings, thinking that would solve it, but honestly, it didn't do much—it doesn't actually stop the redirect from happening, it just shows me this little error message saying the site is blocked after the jump already happened.

The weird thing is, if I use direct links to navigate to different sub-forums or specific threads, everything works perfectly fine and stays on track, but the second I hit that homepage, the whole redirection mess starts all over again.

Does anyone have any clue why this is happening?

Amy Hughes said:Every time I hit the forum homepage, it loads for maybe three or four seconds before automatically redirecting me to some gambling site or online sportsbook.
I tried blocking the site, but it doesn't help—it just redirects me there and then tells me the page is blocked.

The forum works fine if I access it through direct links, but the moment I land on the homepage, the redirect triggers.

Why is this happening?

I'm dealing with this too.

I'm running AdBlock on Google to filter out ads and junk, but even that isn't catching this. 🤷

It’s incredibly annoying. 🙂

I find myself facing this exact same issue. Honestly, what on earth is actually going on here?

Same here, honestly.

Exactly 🙂

I'm running into the exact same thing over here—it doesn't matter which browser I'm using, either. It’s happening in Opera, Mozilla, and even Google Chrome... 😠