Would you like to react to this message? Create an account in a few clicks or log in to continue.

Official Community Forums
HomeHome  SearchSearch  RegisterRegister  Log in  The Wiki  Website  github Project  


 Recent Malware Attack

Go down 
2 posters

Posts : 213
Join date : 2012-07-19
Location : Walkerton, Indiana

Recent Malware Attack Empty
PostSubject: Recent Malware Attack   Recent Malware Attack EmptyWed 19 Jun - 9:17

In Light of the recent Code Injection to the Multiverse Site and Wiki, I am downloading the entire domain being served to sanitize the site and get everything in a malware free state again, Tristin IS working on this as well but I have alot more free time to look through the code for the site and nuke anything that isnt supposed to be there.

Please Bear with us if the site or forum seems a little laggy, It is probly due to me  downloading  entire sections of the site root at once for cleaning Cool
Back to top Go down

Posts : 1
Join date : 2013-08-06
Location : Brazil

Recent Malware Attack Empty
PostSubject: template problem?   Recent Malware Attack EmptyTue 6 Aug - 8:15

Hey there... since I can't see the year of the post, I'm not sure if it's the same problem... but it seems like the template the page was built upon had some javascript imports that are at least suspicious.
They import what they claim to be jquery from both sodiummetal.com and thaiathome.fr

* Forum post from more people having problem with those imports - Joomla Forum post

* Sucuri labs report on those domains:
http://labs.sucuri.net/?details=sodiummetal.com (Report on sodiummetal.com)
http://labs.sucuri.net/?details=thaiathome.fr (Report on thaiathome.fr)

* Sucuri sitecheck on multiversemmo.com:
"http://sitecheck.sucuri.net/results/www.multiversemmo.com/site/" (they seem to agree that’s the problem... and had to put " around it because forum's autolink eats the 1st part of the address)

And it seems the reason the wiki is tagged as insecure is because the login page uses the template.
* Sucuri sitecheck on wiki: "http://sitecheck.sucuri.net/results/www.multiversemmo.com/site/w/index.php/main_page"

I don't have the server side code, but replacing those imports on final html output with a legit local jquery import worked fine.
Back to top Go down
Recent Malware Attack
Back to top 
Page 1 of 1
 Similar topics
» Sideshow Republic Clone Trooper - 212th Attack Battalion: Utapau
» Understanding the Marshall Attack (2010)
» Where in England should we attack?
» "Attack of the 50 Ft Supervixen"
» Understanding The King's Indian Attack

Permissions in this forum:You cannot reply to topics in this forum
 :: The Multiverse Network :: Announcements-
Jump to: