Forum routing to malware site?

[isekii]

I was browsing the site on my iphone and got routed to a malware site. It was the main forum list not any specific thread.

Just a heads up.

 

[Titillating]

To be clear, you saw this when going to http://forums.anandtech.com/index.php?

Is this the first time seeing this? Has this happened again since? Are there any other details you can provide, however insignificant they might seem?

 

[isekii]

I checked the address bar and the address I have listed is "http://forums.anandtech.com/"

After the page loaded, then all of sudden loaded that page I took a screenshot of. It wasn't a new window either.

I swiped right to get back to the forum list and it jumped back couple times before it finally stopped.

 

[Titillating]

I'll get this forwarded up the chain.

Can you provide additional details on your device? Model, OS version, browser, and any potential apps/browser addons (such as ad blocking, since it is an iPhone) might be useful as well.

 

[isekii]

I'll get this forwarded up the chain.

Can you provide additional details on your device? Model, OS version, browser, and any potential apps/browser addons (such as ad blocking, since it is an iPhone) might be useful as well.

Make: Apple
Mode: iPhone 6S 64gb MKR62LL/A
OS Version: 9.2.1(13D15)
Carrier: T-mobile
Safari with no add-ons

 

[Sabrewings]

Happened on my Galaxy S5. Running Chrome. I have the PC Gaming forum bookmarked and went straight to it. Once it took me to a shady site with advertisements that chrome threw up a warning over. The second time it took me to a blatant cartoon porn site with explicit NSFW drawings immediately on my screen. Definitely not G rated, if you get my drift.

 

[Ryan Smith]

This was reported to the ad team earlier in the day, and this evening I've been reloading multiple pages and haven't been able to trigger it. If anyone else gets this, please let us know, as otherwise it's hard to tell if it's still happening.

 

[Sabrewings]

I'll be using it tonight while I'm at work so I'll report back if I see it again. So far no issue on random tests.

 

[isekii]

yep same here.
I'll post if it pops up again.

 

[AMDisTheBEST]

I went to that phishing website on the screen shot. it appears to be some sort of amazon cloud service to me.

 

[Titillating]

We haven't been able to replicate this on our end (though Ryan might have managed it) and there have been no new reports of this in the past few days.

That being said, we are tightening up the screening process of the programmatic ads to try to ensure that this doesn't happen again. If anybody does happen to come across this again or anything like it, please be sure to report it (with as many details as possible) so that we can pull the ad right away.

 

[Dude111]

Its very hard when ya have rotating ads,its all in the hosts hands what ads come in and these days they are getting more and more instrusive...... (Talking ads,etc)

 

[pete6032]

Is anyone getting redirected when clicking this link? I'm getting redirected to knowyourmeme.com

http://forums.anandtech.com/showthread.php?t=2467122&page=2

 

[allisolm]

Is anyone getting redirected when clicking this link? I'm getting redirected to knowyourmeme.com

http://forums.anandtech.com/showthread.php?t=2467122&page=2

Not me. Takes me to the "in 1913 you kept your entire paycheck" thread in OT.

 

[pete6032]

Not me. Takes me to the "in 1913 you kept your entire paycheck" thread in OT.

Very strange. I was able to go to pages 1 or 3 but when I clicked page 2 I am getting redirected, on Firefox 45. No redirects in Chrome.

 

[Rakehellion]

I'm getting randomly redirected to this page that tells me to update my Java runtime:

http://whenupgrade.software4us.down...d=_u6TdE-fVqrR2UFv4t9ea2aPLlrPCpF2S_HN5OeHvV4.

 

[waffleironhead]

https://s3.amazonaws.com/mybenefit/fb/mobile/us/k001/a200.html?sid=ANANDTECH.COM#b

Forums just sent me there.

 

[gbeirn]

https://s3.amazonaws.com/mybenefit/fb/mobile/us/k001/a200.html?sid=ANANDTECH.COM#b

Forums just sent me there.

I am getting this too. Both the main forum page and the main anandtech.com homepage.

IOS 9.3.1 under Safari. Chrome is fine. ISP t-mobile.

Edit: doesn't do it when connected to my home wifi, disable wifi and refresh with LTE and boom, redirect.

Disabled my content blockers, cleared cache and nothing changed.

 

[gbeirn]

I am getting this too. Both the main forum page and the main anandtech.com homepage.

IOS 9.3.1 under Safari. Chrome is fine. ISP t-mobile.

Edit: doesn't do it when connected to my home wifi, disable wifi and refresh with LTE and boom, redirect.

Disabled my content blockers, cleared cache and nothing changed.

Looks like slickdeals has it too: http://slickdeals.net/f/8552891-phishing-popup-on-mobile-site

Must be a problem with one of your advertisers on the mobile site.

 

[Ryan Smith]

Looks like slickdeals has it too: http://slickdeals.net/f/8552891-phishing-popup-on-mobile-site

Must be a problem with one of your advertisers on the mobile site.

That's how it usually is. Anyhow, thanks for the heads up. I've got the ad guys on it.

 

[Pulsar]

That's how it usually is. Anyhow, thanks for the heads up. I've got the ad guys on it.

It's back. .... but now it is targeted. Congratulations anandtech member you have won a free gs6, then multiple dialogs refusing to allow you to return.

Galaxy s4 running chrome.

 

[DrPizza]

If more info helps,
This just popped up while browsing on my cell phone:

The page at https://
www.com-06.info says:

MESSAGE!

Congratulations UNDEFINED Visitor,
you have been chosen for a chance
to get a new iPhone 6s, MacBook
Pro or iPad

Click OK to continue.

OK

A whole new tab opened, with the look of a Facebook page with lots of replies from people about how they received their iPhone.

"Every Sunday, a lucky user of Verizon Wireless is selected to receive gifts from UNDEFINED! This is our form of showing appreciation towards you being a Verizon Wireless user.

You have a chance to get a gift if you manage to answer 3 simple questions.
The URL of that window is 222.com-06.info/us/-1/kekrj324j234k59394k.html?sid=undefined

Attempting to back out of the page causes it to reload and my 2 minutes to answer the 3 questions restarts. The only tabs I have open are Off Topic, the thread in OT on Author of TrueCrypt, and the OT thread on speed of gravity waves. No other tabs, apps, or windows open. Firefox browser on Droid Turbo 2.


A quick search shows that it's a phishing scam.

 

[Red Squirrel]

Interesting:

https://twitter.com/ncantelmo/status/719239933504987136

Not affecting me due to my browser settings, but definitely something that should be looked at.