Club Cobra
Page 11 of 13 « First 345678910 11 1213
Show 20 post(s) from this thread on one page

Club Cobra (http://www.clubcobra.com/forums/)
-   ALL COBRA TALK (http://www.clubcobra.com/forums/all-cobra-talk/)
-   -   this site has been hacked (http://www.clubcobra.com/forums/all-cobra-talk/137679-site-has-been-hacked.html)

patrickt 03-23-2017 04:40 PM
It Has Officially Migrated to the Desktop
 
OK, it has never hit me before, but I clicked on the "QuickLinks" drop down menu, like I have done probably 50,000 times over the last decade, and it immediately opened a fake Microsoft Update site. This was using the Microsoft Edge browser under Windows 10.:CRY:

RodKnock 03-23-2017 05:19 PM
Spread to my laptop too. Just by clicking on this thread and trying to post this post. :CRY:

I run McAfee LiveSafe continuously.

It may be time to leave this joint. You never know what type of personal information it's trying to capture.

twobjshelbys 03-23-2017 05:50 PM
Quote:
Originally Posted by RodKnock (Post 1418766)
Spread to my laptop too. Just by clicking on this thread and trying to post this post. :CRY:

I run McAfee LiveSafe continuously.

It may be time to leave this joint. You never know what type of personal information it's trying to capture.
I have a feeling this place isn't long on the tooth. It's turning into Chernobyl.

Brent Mills 03-23-2017 06:41 PM
I made some changes tonight...Anyone still seeing this?

Sorry for the problems. :(

patrickt 03-23-2017 06:44 PM
You know there are companies out there that make their bread and butter off of removing hacks and malware from vBulletin sites. Here's one example: vBulletin Hack & Malware Removal & Monitoring Service | vBulletin Services, vBulletin Setup & vBulletin SEO I think it's time to bring in the pros.

YerDugliness 03-23-2017 07:09 PM
I continue to experience redirects every time I log on.

Dugly :cool:

undy 03-23-2017 07:17 PM
Quote:
Originally Posted by Brent Mills (Post 1418772)
I made some changes tonight...Anyone still seeing this?

Sorry for the problems. :(
Just hit me on my laptop too. NEVER had problems before. It might be time to throw over the life rafts and abandon ship. I don't need anything that won't wash off with soap and water.

1ntCobra 03-23-2017 07:51 PM
I just got a redirect on my desktop in the Microsoft browser on Window 10.

Millsy 03-23-2017 08:07 PM
Just got redirected, i use a kindle.

Bernica 03-24-2017 12:10 AM
That's why you guys haven't heard from me lately. Every time I was checking in I was redirected, including tonight. This time to some bizarre photo site!%/

patrickt 03-24-2017 09:34 AM
This morning, on a different desktop, running a different browser (Firefox) with adblocking software, and a different OS (Win7), a click on one of the threads opened up the following javascript command:

javascript:window.opener=null;setTimeout(function( ){window.location.href='http://yoursinfo.info/YnRvVzddUhs+U19CWmYCU0ZJJVIGSV5xVgAAUmURFEleeQZSWl puGVZSGmpRABBbbwVXEg5gA1ASVmcFVxdfNgAHF1oyBAFACmAE B1IJJApTUgYxClJSHDoKVkVJPAoVEQM0WA8RSmUHFRsdO1NHRl 87VhATCiRDR0ZfNV4DBwozElBEHD5DB1FdZ1QOAQ1yBVIXADVF A1IdMlFfHBsjR0dHLnIFJFFdEUAVA0E0WxcWDDhVEBVBNFgPUV 0RWg0QGjtSEVFdEX0LE0plcQsaCzJPTAQHJxEBAFJiEQEADGoO RAcbJApSUgAkRV9SHyVZX0RJ'},250)

which then bounced to https://ads.diamonds/h a few times before finally settling on a "Win a Mustang" ad on a different domain....

66gtk 03-24-2017 09:44 AM
I'm now getting redirects from multiple PCs. Haven't been able to access with my phone since this thread started.

twin turbo 03-24-2017 09:53 AM
Just redirected me on my desktop.

COBRAMAN 484 03-24-2017 10:42 AM
I just clicked on and it redirected me.

Bernica 03-24-2017 10:53 AM
Maybe time to rebuild and reinforce the tree fort!? :eek::eek:

cycleguy55 03-24-2017 11:14 AM
Quote:
Originally Posted by YerDugliness (Post 1418776)
I continue to experience redirects every time I log on.

Dugly :cool:
Ditto - hits on the first link you click on, sets cookies then goes away for that session.

cycleguy55 03-24-2017 11:33 AM
Quote:
Originally Posted by Brent Mills (Post 1418772)
I made some changes tonight...Anyone still seeing this?

Sorry for the problems. :(
Yes, re-directs on initial link - 10 hops. I captured the trail using the Link Redirect Trace extension in Chrome. Here's the trail:
  1. 52.84.24.223 Seattle, Washington, United States (US) server - 52-84-24-223.sea32.r.cloudfront.net is an IPv4 address owned by Amazon Technologies Inc. and located in Seattle, United States
  2. 205.185.216.42 Phoenix, Arizona, United States (US) Highwinds Network Group
  3. 104.154.178.88 Mountain View, California, United States (US) Google Inc.
  4. 104.154.178.88 Mountain View, California, United States (US) Google Inc.
  5. 193.169.104.1 Israel (IL) Adsmarket G.M LTD
  6. 23.23.85.222 Ashburn, Virginia, United States (US) Amazon.com, Inc.
  7. 23.21.56.169 Ashburn, Virginia, United States (US) Amazon.com, Inc.
  8. 52.2.89.31 Ashburn, Virginia, United States (US) Amazon.com, Inc.
  9. 208.99.87.154 Waltham, Massachusetts, United States (US) Reflected Networks, Inc.
  10. 208.99.87.154 Waltham, Massachusetts, United States (US) Reflected Networks, Inc.

The duplicate IP addresses above are not typos, they're 'double hops' on those addresses. There is more detail in the file I've captured - let me know if you'd like to see it.

BTW, I also logged in using FireFox and was re-directed there as well, but to a different site.

The initial re-direct seems to come from CC, so patrickt's link ( vBulletin Hack & Malware Removal & Monitoring Service | vBulletin Services, vBulletin Setup & vBulletin SEO ) and the the vBulletin instructions linked from that page ( http://www.vbulletin.com/forum/blogs...ve-been-hacked ) may be of value.

dcdoug 03-24-2017 11:35 AM
It's gotten bad on desktops. I'm on a Mac running Chrome and when I just clicked "New Posts", the site downloaded a file saying it was a flash update that was clearly malware. Time to call the pros.

Tom Cimino 03-24-2017 11:54 AM
Although I will miss Club Cobra, I will not be back. I'm getting malware warnings now when I bring up the site. Not safe. Obama must be behind this.

cycleguy55 03-24-2017 12:12 PM
Quote:
Originally Posted by Tom Cimino (Post 1418810)
Obama must be behind this.
Nope. Putin.


All times are GMT -7. The time now is 03:57 PM.
Page 11 of 13 « First 345678910 11 1213
Show 20 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.6.0
The representations expressed are the representations and opinions of the clubcobra.com forum members and do not necessarily reflect the opinions and viewpoints of the site owners, moderators, Shelby American, any other replica manufacturer, Ford Motor Company. This website has been planned and developed by clubcobra.com and its forum members and should not be construed as being endorsed by Ford Motor Company, or Shelby American or any other manufacturer unless expressly noted by that entity. "Cobra" and the Cobra logo are registered trademarks for Ford Motor Co., Inc. clubcobra.com forum members agree not to post any copyrighted material unless the copyrighted material is owned by you. Although we do not and cannot review the messages posted and are not responsible for the content of any of these messages, we reserve the right to delete any message for any reason whatsoever. You remain solely responsible for the content of your messages, and you agree to indemnify and hold us harmless with respect to any claim based upon transmission of your message(s). Thank you for visiting clubcobra.com. For full policy documentation refer to the following link: