Plug-ins, Hosts, Apps,
Hardware, Soundware
Developers
(Brands)
Videos Groups
Whats's in?
Banks & Patches
Download & Upload
Music Search
KVR
   
KVR Forum » DNR Collaborative
Thread Read
[SOLVED] Malicious attack detected
Panphobia
KVRist
- profile
- pm
- e-mail
PostPosted: Wed Feb 13, 2013 12:18 pm reply with quote
Hello, I got a malicious attack from the dnr website today. This means that either 1. you got your web address spoofed or 2. your server is compromised. At least that is what I understand. Anyway just giving you guys a heads up. I hope it si a false alarm and your servers are still intact!
^ Joined: 21 Sep 2011  Member: #265195  
GeorgeZ
KVRAF
- profile
- pm
- e-mail
- www
PostPosted: Wed Feb 13, 2013 1:25 pm reply with quote
Thanks for the heads up mate, will look into it ASAP.
^ Joined: 28 May 2009  Member: #208349  Location: New Zealand
GeorgeZ
KVRAF
- profile
- pm
- e-mail
- www
PostPosted: Wed Feb 13, 2013 10:51 pm reply with quote
Hi Panphobia,

Had a nosey around and everything seems to be ticking along ok (did get a JAVA warning via AVG, but it promptly blocked the script and now I don't get the warning anymore). Regardless, I think it might be a false positive. May I ask what virus scanner you got the malicious attack alert from?

I tested the site with various real time sitescan apps, came clean on those, so pretty sure it would have been a false positive. I'll keep an eye on it in anyway of course.

Cheers,
George
^ Joined: 28 May 2009  Member: #208349  Location: New Zealand
Nielzie
KVRAF
- profile
- pm
PostPosted: Thu Feb 14, 2013 1:04 am reply with quote
Might be an old file from the internet cache or someting. I remember that last year there actually was a problem where the Joomla running on the TeamDNR webserver was infected. But that was a long time ago, and since then it has been clean and secured I think.

So clean your internet cache and try again Smile
^ Joined: 28 May 2005  Member: #69942  Location: Netherlands
GeorgeZ
KVRAF
- profile
- pm
- e-mail
- www
PostPosted: Thu Feb 14, 2013 1:20 am reply with quote
Hmmm, odd, pretty sure the site runs on wordpress now...
^ Joined: 28 May 2009  Member: #208349  Location: New Zealand
Nielzie
KVRAF
- profile
- pm
PostPosted: Thu Feb 14, 2013 1:53 am reply with quote
GeorgeZ wrote:
Hmmm, odd, pretty sure the site runs on wordpress now...


Ah yes, Wordpress, of course D'oh!
^ Joined: 28 May 2005  Member: #69942  Location: Netherlands
GeorgeZ
KVRAF
- profile
- pm
- e-mail
- www
PostPosted: Thu Feb 14, 2013 2:37 am reply with quote
WordPress, good times Razz
^ Joined: 28 May 2009  Member: #208349  Location: New Zealand
DNR Collaborative
KVRian
- profile
- pm
PostPosted: Fri Feb 15, 2013 12:52 pm reply with quote
Sorry guys, we've been digging out from a massive blizzard that hit us this week. Over 3 feet of snow here Sad I've just gotten back into the office and seen this report - yes, we had been hacked again a little over a week ago, and the attack rendered the administration page unavailable. No virus' or anything like that, just a malicious, unwarranted attack. I initially thought it was just me going to the wrong URL for the admin panel for the Wordpress install, but they've removed the ability to login completely. I'm talking with a friend of Reason's about creating a whole new website for us, but that may take a little time. In the meantime, he's trying to setup a way to update content on the website manually, but I'll keep everyone posted.


Steven
----
DNR Collaborative
DNR Website | DNR on Facebook | DNR on Twitter
^ Joined: 23 May 2011  Member: #257247  
TheoM
KVRAF
- profile
- pm
PostPosted: Tue Feb 19, 2013 7:32 pm reply with quote
Oh ok, i have been getting a warning for weeks (no jokes)

basically every time i enter DNR and go to download section, safari and firefox tell me it's a phishing site or fraudulent site of some kind, but only when i go to download

Have always ignored it and downloaded.. i presume..this is related, or??
----
Upping my count for Kingston
^ Joined: 04 Sep 2001  Member: #1049  Location: Melbourne Australia
DNR Collaborative
KVRian
- profile
- pm
PostPosted: Wed Feb 20, 2013 2:13 am reply with quote
No, that's literally been there for as long as the website has been there. I know Reason attempted to find a solution but never did. I've heard of it coming up for a lot of people, but bizarrely, not any of the computers in the studio or the house. Once the new website is designed and unveiled I think it should be fine. I've checked all sorts of scanning resources and did a thorough scan of the entire server contents without any issues of malware, virus and such Smile


Steven
----
DNR Collaborative
DNR Website | DNR on Facebook | DNR on Twitter
^ Joined: 23 May 2011  Member: #257247  
TheoM
KVRAF
- profile
- pm
PostPosted: Wed Feb 20, 2013 3:11 am reply with quote
oh ok LOL.. All good, i trusted it was completely safe hence why i always just continued.

I'll answer your kind email soon, yes, trancey is me, Theo M

Cheers
----
Upping my count for Kingston
^ Joined: 04 Sep 2001  Member: #1049  Location: Melbourne Australia
ZombyWoof
KVRian
- profile
- pm
- e-mail
PostPosted: Fri Apr 12, 2013 1:16 pm reply with quote
By mistake I typed in teamdnr.com tonight - don't try that at home, kids. That site does have a virus, and luckily my virus scanner blocked it.
^ Joined: 12 Mar 2005  Member: #61275  
All times are GMT - 8 Hours

Printable version
Page 1 of 1
Display posts from previous:   
ReplyNew TopicPrevious TopicNext Topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Username: Password:  
KVR Developer Challenge 2012