Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

'Flash' scam popup coming from some ads?

Options
  • 01-11-2015 1:13am
    #1
    Ste.phen
    Registered Users Posts: 2,808 ✭✭✭


    Got this popup on boards.ie, redirecting to what looks like a malware/virus download site, screenshot attached

    ( link was to 
    http://184.173.28.176/adobe_flashplayer_7.exe
    )

    I wasn't able to identify where exactly it was included from, but my guess is one of the ad networks in use?
    Post edited by Shield on


«1

Comments

  • Options
    #2
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    me also
    i was getting a yellow triangle on my https line as well on chrome on the laptop
    getting that popup on ios9 also


  • Options
    #3
    KERSPLAT!
    Closed Accounts Posts: 31,152 ✭✭✭✭KERSPLAT!


    Getting the same and the site is unusable at the moment.


  • Options
    #4
    joujoujou
    Registered Users Posts: 13,664 ✭✭✭✭joujoujou
    Unregistered Users


    Same here.

    367239.png


  • Options
    #5
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    tried to auto download a fake flash 7 just then


  • Options
    #6
    Ste.phen
    Registered Users Posts: 2,808 ✭✭✭Ste.phen


    Found other forums reporting the same in the last few mins - seems like some ad provider, tracking provider or similar is compromised?

    http://www.geekzone.co.nz/forums.asp?forumid=4&topicid=183852

    http://www.teamliquid.net/forum/website-feedback/497641-flash-plugin-is-out-of-date


    edit:
    Not sure what's included that's causing this, looks like pagefair at first glance, but there may have been many redirects between the first thing was included and the file that triggered the popup?


  • Advertisement
  • Options
    #7
    Peregrine
    Moderators, Education Moderators Posts: 26,402 Mod ✭✭✭✭Peregrine


    Getting the same pop-up here.


  • Options
    #8
    Ruu
    Closed Accounts Posts: 9,622 ✭✭✭Ruu


    Same with Firefox.


  • Options
    #9
    KERSPLAT!
    Closed Accounts Posts: 31,152 ✭✭✭✭KERSPLAT!


    Ste.phen wrote: »
    Found other forums reporting the same in the last few mins - seems like some ad provider, tracking provider or similar is compromised?

    http://www.geekzone.co.nz/forums.asp?forumid=4&topicid=183852

    http://www.teamliquid.net/forum/website-feedback/497641-flash-plugin-is-out-of-date

    I've ads disabled but definitely something off


  • Options
    #10
    BobCobb
    Registered Users Posts: 159 ✭✭BobCobb


    I just clicked on the OK, thinking it was a message from my os, and it seems to have fvcked up my computer, screen went green, then fuzzy. Hope it will be OK...


  • Options
    #11
    martyos121
    Registered Users Posts: 21,390 ✭✭✭✭martyos121


    Happening to me on boards and one other website (wrestlezone.com)

    Every other site I've tried since is working fine, but those two are bollixed.


  • Advertisement
  • Options
    #12
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    BobCobb wrote: »
    I just clicked on the OK, thinking it was a message from my os, and it seems to have fvcked up my computer, screen went green, then fuzzy. Hope it will be OK...
    it tried to dl abobe flash 7 so find it in your downloads and get it


  • Options
    #13
    GLaDOS
    Moderators, Regional East Moderators Posts: 23,221 Mod ✭✭✭✭GLaDOS


    Was getting it constantly on my laptop, grand on my phone on touch though.

    Cake, and grief counseling, will be available at the conclusion of the test



  • Options
    #14
    Ste.phen
    Registered Users Posts: 2,808 ✭✭✭Ste.phen


    I'm increasingly sure this is due to pagefair being compromised - looks like they're an ad provider that is used by many forums and who claim to still load ads despite the presence of adblock -

    Their own homepage is also showing the malware popup


  • Options
    #15
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    any idea how to block it
    i don't adblock boards but ...

    yeah i'm getting the warning triange on that pagefaair page as well


  • Options
    #16
    Mountainsandh
    Registered Users Posts: 6,700 ✭✭✭Mountainsandh


    For information I'm using Silk on Kindle Fire and no pop up or issues whatsoever.


  • Options
    #17
    GLaDOS
    Moderators, Regional East Moderators Posts: 23,221 Mod ✭✭✭✭GLaDOS


    Ste.phen wrote: »
    I'm increasingly sure this is due to pagefair being compromised - looks like they're an ad provider that is used by many forums and who claim to still load ads despite the presence of adblock -

    Their own homepage is also showing the malware popup

    I have ads disabled, not just blocked (mod/subscriber option) so does that still make sense?

    Cake, and grief counseling, will be available at the conclusion of the test



  • Options
    #18
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    Ste.phen wrote: »
    I'm increasingly sure this is due to pagefair being compromised - looks like they're an ad provider that is used by many forums and who claim to still load ads despite the presence of adblock -

    Their own homepage is also showing the malware popup

    pagefair are in dublin myst be the púca


  • Options
    #19
    KERSPLAT!
    Closed Accounts Posts: 31,152 ✭✭✭✭KERSPLAT!


    ScienceNerd wrote: »
    I have ads disabled, not just blocked (mod/subscriber option) so does that still make sense?

    They probably still load but aren't displayed... I'm not 100% tbh


  • Options
    #20
    challengemaster
    Registered Users Posts: 16,930 ✭✭✭✭challengemaster


    Tigger wrote: »
    any idea how to block it
    i don't adblock boards but ...



    edit: scrap that, even with adblock on and ads disabled it's constantly trying to redirect to the download ip.


  • Options
    #21
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    ok adblock boards then


  • Advertisement
  • Options
    #22
    BobCobb
    Registered Users Posts: 159 ✭✭BobCobb


    Tigger wrote: »
    it tried to dl abobe flash 7 so find it in your downloads and get it

    I couldn't get the laptop to start again, it looked pretty bad.
    Hopefully it will have recovered by the morning... :o


  • Options
    #23
    El Weirdo
    Registered Users Posts: 11,647 ✭✭✭✭El Weirdo


    I'm also getting it.


  • Options
    #24
    Peregrine
    Moderators, Education Moderators Posts: 26,402 Mod ✭✭✭✭Peregrine


    Adblock makes no difference for me. I have ads disabled as a mod/subscriber option too. Still redirecting.


  • Options
    #25
    GLaDOS
    Moderators, Regional East Moderators Posts: 23,221 Mod ✭✭✭✭GLaDOS


    Ita definitely time to panic

    Cake, and grief counseling, will be available at the conclusion of the test



  • Options
    #26
    Peregrine
    Moderators, Education Moderators Posts: 26,402 Mod ✭✭✭✭Peregrine


    I have a solution but you're not going to like it.



    Turn beta on.


  • Options
    #27
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    challengemaster wrote: »
    I can confirm:

    With adblock turned on, the auto-download does not happen.
    With adblock turned off, on every refresh it tries to auto-download the .exe file

    Ads just being disabled through subscriber options is not enough to stop the auto-dl.


    edit: scrap that, even with adblock on and ads disabled it's constantly trying to redirect to the download ip.
    is everyone running hola?
    with hola off and chrome on adblock off its stopped
    still happening on safari on ios


  • Options
    #28
    The Randy Riverbeast
    Closed Accounts Posts: 1,770 ✭✭✭The Randy Riverbeast


    Mobile site appears to be fine.

    Adblock doesnt seem to be preventing it. Whats the point if it fails like this.


  • Options
    #29
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    Peregrine wrote: »
    I have a solution but you're not going to like it.



    Turn beta on.

    frist thging i tried
    didn't help


  • Options
    #30
    Tigger
    Closed Accounts Posts: 16,705 ✭✭✭✭Tigger


    BobCobb wrote: »
    I couldn't get the laptop to start again, it looked pretty bad.
    Hopefully it will have recovered by the morning... :o

    stick it in the dishwasher


  • Advertisement
  • Options
    #31
    challengemaster
    Registered Users Posts: 16,930 ✭✭✭✭challengemaster


    Peregrine wrote: »
    I have a solution but you're not going to like it.



    Turn beta on.

    I think I'd rather download the virus than use the beta.


Advertisement