[AdaHacker]

In case nobody has reported it yet, I thought you guys might like to know that dreamincode.net has apparently been flagged by Yandex as a source of fraud and malware. This was helpfully pointed out to me by Opera's built-in fraud protection feature. I fired up Opera to browse DiC a few minutes ago and was greeted by this malware warning when on the front page:



And when I browsed to the forum listing to find the support forum, I got this lovely fraud notification in the address bar:



I didn't see these warnings yesterday, so apparently the site has been newly blacklisted. I figured you might want to do something about that.

[raghav.naganathan]

I believe the reason for this is the 'Introduce yourself' forum. I have already posted about this over Here and I can assure you that a lot of effort is being taken by the concerned people in blocking these spammers.

regards,
Raghav

[jon.kiparsky]

Absolutely, it's a fraud. I was promised boobies, but all I got was a dumb pic of some dumb birds...

[Dogstopper]

I had this problem earlier this year. Georgia Tech had blocked DIC at the server because of a hack that occurred earlier that week which pushed malware to some users of the site. As a result, a LOT of red flags went up at a lot of places, and I had to whitelist it with the IT team.

Probably the same thing happened here. Once flagged, it basically stays flagged unless explicitly added to a whitelist.

[CasiOo]

A week or two ago I visited dreamincode and it tried to download some unknown file to my computer (from the frontpage). My adblocker extension was not working at the time, but I doubt that would make any difference (Or maybe it was an ad that contained malware?)

So as I see it, the blocking of dreamincode is totally valid

This post has been edited by CasiOo: 19 November 2012 - 11:00 AM

[AdaHacker]

CasiOo, on 19 November 2012 - 12:57 PM, said:

A week or two ago I visited dreamincode and it tried to download some unknown file to my computer (from the frontpage).

I've not seen that on the front page, but I've occasionally gotten it on other pages. I assumed it was probably due to rogue ads. I know the site I work for has had occasional trouble with being added to malware lists due to our ad networks serving out malware - seems to be a fairly common problem.

Either way, the warning isn't showing up anymore, so apparently the problem has been resolved. />

[grimpirate]

I use Opera as my browser as well, and as of 16 December 2012, yandex.com is still flagging this site as a malware site.

This post has been edited by grimpirate: 17 December 2012 - 10:51 AM

[Atli]

Does it give any more details? None of the other browsers seem to have a problem with DIC. Google and Microsoft have apparently either not detected this malware, or have traced it to it's actual source (which I am assuming was a problem with one of the 3rd party ad networks.) I'm inclined to trust them over this Yandex site.

[grimpirate]

Yandex is a Euro equivalent of Google if you will. As Opera is developed in Europe it makes sense they would make use of a "native." Sadly, it does not offer any further details except to say that it contains malware. Obviously, I have the option to override the warning, just pointing out that it's indexed as a malware site. There is a portion at the end that states "What to do if this is your site?"

Quote

Register your site with Yandex.Webmaster to receive information about malware and infected pages. You can also request for your site to be rechecked once the malware has been removed.

So I would imagine an admin could do this and examine whatever appears to be suspect.

This post has been edited by grimpirate: 17 December 2012 - 01:05 AM

[Atli]

grimpirate, on 17 December 2012 - 08:04 AM, said:

Yandex is a Euro equivalent of Google if you will. As Opera is developed in Europe it makes sense they would make use of a "native."

I think that may be a bit to general a description. I'm European; Scandinavian even (like the Norwegians developing Opera), and I had never even heard of it before this thread. From my research, it's mainly used in Russia and countries closely related to them. - But I don't suppose it matters much. The Opera devs clearly know it.

[tlhIn`toq]

This just started at 0945hrs on 29dec2012 (Central Time Zone)

Its coming up with every action and page visit making it very hard to navigate the site.
I hope someone in authority can contact the reporting site and get it off their black list ASAP.



Mind you, "warezzone.asia" seems rather more like a real malware site... so did the DIC registry get hacked and pointed to someplace else or something equally funky?

This post has been edited by GunnerInc: 29 December 2012 - 10:19 AM
Reason for edit:: Merged topics

[CTphpnwb]

I just started getting the attached when using this site. I'm not seeing it on other sites so I'm thinking maybe there is a problem on the server?

Attached image(s)

• 

[CTphpnwb]

Oops. I see that it's already under discussion:
http://www.dreaminco...ed-for-malware/


*** Edit ***
Merged both topics

This post has been edited by GunnerInc: 29 December 2012 - 10:17 AM
Reason for edit:: Merged topics

[Atli]

Hmm. Seems Google is now flagging DIC as well. Unlike Opera, however, it does give a lot more detail.

[modi123_1]

I am wondering if it's an ad. Using IE 'in private browsing' I pulled up the home page and got an error from avast:

Quote

Infection Details
URL: http://www.dreaminco...int/?js|>{gzip}
Process: C:\Program Files (x86)\Internet Explorer...
Infection: HTML:Iframe-inf

Sorry for the spotty details but the bastards at avast are not giving me much to go on.. a few page refreshes and it hasn't happened again.

Oh.. if it makes any difference.. when in firefox (and in private browsing to make sure to have a clean cache) I scroll to the bottom and see a small frame at the bottom left with the warning!

Spoiler

Quote

Reported Attack Page!







This web page at www.warezzone.asia has been reported as an attack page and has been blocked based on your security preferences.





Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.