Possible hack on this site?

  • (2 Pages)
  • +
  • 1
  • 2

24 Replies - 4818 Views - Last Post: 16 August 2019 - 12:50 PM

#1 NormR   User is online

  • D.I.C Lover
  • member icon

Reputation: 780
  • View blog
  • Posts: 5,854
  • Joined: 25-December 13

Possible hack on this site?

Posted 20 July 2019 - 10:17 AM

I just clicked on the link in my Chrome browser to come to this site and was shown a page that said my Chrome browser was out of date and presented a button to click to update the browser. I did not click the button. I asked Chrome via its Help about its status and it said it was current.

I did copy the link's contents and got a large base64 String.
Is This A Good Question/Topic? 0
  • +

Replies To: Possible hack on this site?

#2 xclite   User is online

  • I wrote you an code
  • member icon


Reputation: 1389
  • View blog
  • Posts: 4,220
  • Joined: 12-May 09

Re: Possible hack on this site?

Posted 20 July 2019 - 11:26 AM

Moved this to "Site Questions & Support" from "Java."

To answer the question, this site has served me malicious advertisements enough times that I leave my adblocker on.
Was This Post Helpful? 0
  • +
  • -

#3 modi123_1   User is offline

  • Suitor #2
  • member icon



Reputation: 15160
  • View blog
  • Posts: 60,694
  • Joined: 12-June 08

Re: Possible hack on this site?

Posted 20 July 2019 - 11:26 AM

which link?
Was This Post Helpful? 0
  • +
  • -

#4 NormR   User is online

  • D.I.C Lover
  • member icon

Reputation: 780
  • View blog
  • Posts: 5,854
  • Joined: 25-December 13

Re: Possible hack on this site?

Posted 20 July 2019 - 11:45 AM

The bookmark in my Chrome toolbar to this site is: javascript:window.open('http://www.dreamincode.net/forums/forum/32-java/','forums');

I have clicked it hundreds of times, many each day.

I have heard of "injection" attacks where some bad guy inserts his html code into the connection between my browser and a server.

I saved the String returned by the "Copy link address" from a right-click on the button in the middle of the page.
The first part of the String was: data:application/json;base64,PGh0bWw...
after doing a base64 decode,
the first part was: <html><head></head><body>
and the ending part was:
function qiwwcy(fhubupe){return(new ActiveXObject(fhubupe));}

This post has been edited by NormR: 20 July 2019 - 11:46 AM

Was This Post Helpful? 0
  • +
  • -

#5 xclite   User is online

  • I wrote you an code
  • member icon


Reputation: 1389
  • View blog
  • Posts: 4,220
  • Joined: 12-May 09

Re: Possible hack on this site?

Posted 20 July 2019 - 01:07 PM

View PostNormR, on 20 July 2019 - 02:45 PM, said:

The bookmark in my Chrome toolbar to this site is: javascript:window.open('http://www.dreamincode.net/forums/forum/32-java/','forums');

Can you make this an https bookmark now?
Was This Post Helpful? 0
  • +
  • -

#6 NormR   User is online

  • D.I.C Lover
  • member icon

Reputation: 780
  • View blog
  • Posts: 5,854
  • Joined: 25-December 13

Re: Possible hack on this site?

Posted 20 July 2019 - 01:28 PM

Yes, Done.
Was This Post Helpful? 0
  • +
  • -

#7 victorman   User is offline

  • New D.I.C Head

Reputation: 2
  • View blog
  • Posts: 20
  • Joined: 03-July 18

Re: Possible hack on this site?

Posted 20 July 2019 - 02:50 PM

Just got this on firefox
https://imgur.com/PpjAB5I

This post has been edited by victorman: 20 July 2019 - 02:50 PM

Was This Post Helpful? 0
  • +
  • -

#8 NormR   User is online

  • D.I.C Lover
  • member icon

Reputation: 780
  • View blog
  • Posts: 5,854
  • Joined: 25-December 13

Re: Possible hack on this site?

Posted 20 July 2019 - 03:06 PM

Yes, that is similar to mine for Chrome. I wasn't smart enough to screen print it.
Was This Post Helpful? 0
  • +
  • -

#9 no2pencil   User is offline

  • Professor Snuggly Pants
  • member icon

Reputation: 6800
  • View blog
  • Posts: 31,387
  • Joined: 10-May 07

Re: Possible hack on this site?

Posted 20 July 2019 - 03:43 PM

It's probably one of the advertisers, & not a hack.
Was This Post Helpful? 0
  • +
  • -

#10 NormR   User is online

  • D.I.C Lover
  • member icon

Reputation: 780
  • View blog
  • Posts: 5,854
  • Joined: 25-December 13

Re: Possible hack on this site?

Posted 20 July 2019 - 04:10 PM

I wonder how my communications was intercepted to insert that page. I don't think I clicked on any links on the site.

Do you have any ideas how I could run the code hidden in the base64 String I copied from the Button's link address so that it wouldn't attack my system?
Was This Post Helpful? 0
  • +
  • -

#11 astonecipher   User is offline

  • Senior Systems Engineer
  • member icon

Reputation: 2906
  • View blog
  • Posts: 11,325
  • Joined: 03-December 12

Re: Possible hack on this site?

Posted 20 July 2019 - 04:18 PM

Just had it happen to me as well. I thought I inadvertently changed the bookmark, but that wasn't the case. I just clicked it again and made it where I should have.
Was This Post Helpful? 0
  • +
  • -

#12 modi123_1   User is offline

  • Suitor #2
  • member icon



Reputation: 15160
  • View blog
  • Posts: 60,694
  • Joined: 12-June 08

Re: Possible hack on this site?

Posted 21 July 2019 - 09:16 AM

Able to trigger something similar, and had sent a notification to skyhawk.
Was This Post Helpful? 0
  • +
  • -

#13 maceysoftware   User is offline

  • Member Title
  • member icon

Reputation: 379
  • View blog
  • Posts: 1,610
  • Joined: 07-September 13

Re: Possible hack on this site?

Posted 22 July 2019 - 01:39 AM

I have also had this to me, I did notice my chrome was severally outdated, so updated it via chrome itself and not through the download it gave me.

Just thought it was advertising which required the latest version of chrome tbh.

Does make me wonder where my ad blocker went through, think I had an email from technical asking everyone to uninstall it for one reason or another, will need to reinvestigate.
Was This Post Helpful? 0
  • +
  • -

#14 NormR   User is online

  • D.I.C Lover
  • member icon

Reputation: 780
  • View blog
  • Posts: 5,854
  • Joined: 25-December 13

Re: Possible hack on this site?

Posted 22 July 2019 - 04:29 AM

Did the url use HTTP or HTTPS?
Was This Post Helpful? 0
  • +
  • -

#15 maceysoftware   User is offline

  • Member Title
  • member icon

Reputation: 379
  • View blog
  • Posts: 1,610
  • Joined: 07-September 13

Re: Possible hack on this site?

Posted 22 July 2019 - 05:37 AM

I will admit, I didn't pay enough attention, however, I do tend to browser D.I.C on https
Was This Post Helpful? 0
  • +
  • -

  • (2 Pages)
  • +
  • 1
  • 2