Help - Search - Members - Calendar
Full Version: Website Security Issues
iGrandTheftAuto.com Forums > Important Information > Website & Forum Problems & Discussion
Psy
As you are aware, last week the site was kind of shut down because of the iframe virus that somehow got onto the site. It looks like the actual website has been infected with some sort of virus/script so there are potentially going to be some issues over the next few days. No idea what they scripts can do, but they appear to be able to access the admin panel, so I'll have to get them removed asap.

Apologies for any downtime, but I thought you should all be aware.
asthenia
FUCK THIS, I'M LEAVING!

I hope it all gets sorted out sharpish. mellow.gif It wasn't me.
PabloHoneyOle
Damn it.
Marney1
Some Java thing popped up when I logged in before and my AVG told me it was dangerous, just letting you know.
Psy
QUOTE (Marney1 @ Jun 15 2010, 03:20 PM) *
Some Java thing popped up when I logged in before and my AVG told me it was dangerous, just letting you know.

Yeah that's the iframe virus thing. Don't install anything that the site pops up with.
Massacre
Hey, I don't have a life, I need this place. Sort it out soon, please.
demon
I already had iFrames/floating frames disabled for this site, or rather I had not enabled it as I only enable it on sites that demands it.
Now I also disabled JS. But I don't know if I have to disable JS as long as iFrames are disabled?

I have asked before if this shit came from an ad and no one has confirmed it. Did it come from an infected ad, or did some hacker plant the malware here? Maybe you don't know?
Psy
Most likely it was because of a hacker, or some script kiddies exploiting a software bug with the forum software. Hopefully won't take too long to fix. You wont need to disable javascript, just iframes really.
demon
QUOTE (Psy @ Jun 15 2010, 10:08 AM) *
No idea what they scripts can do, but they appear to be able to access the admin panel,

Malicious script accessing the admin panel... that sounds like a disaster ready to happen! But you're apparently adept at coding & internet so we'll just have to trust that you are capable of taking whatever measures necessary to neuter that part of the threat until Invision can patch the bug. I don't want to find everyone here banned or deleted by some script kiddies.


QUOTE (Psy @ Jun 15 2010, 04:44 PM) *
You wont need to disable javascript, just iframes really.

Ah thanks for that. It's a PITA to use the board with JS disabled.
Psy
Ok the server guys have removed the malicious scripts that the script kiddies added to the site and taken precautions to prevent them from being able to upload them again. Here's hoping everything is safe and secure once again, but keep your eyes open. If you see anything suspicious, let me know.
Qdeathstar
I got destaffed over this; and thats cause' Psy thinks my nipples are l33t hax0r! I have an Iframe on another site i have.. but i don't have any forums or admin accounts aside from Cpanel.. you think i should be worried psy?
Psy
QUOTE (Qdeathstar @ Jun 15 2010, 11:11 PM) *
I got destaffed over this; and thats cause' Psy thinks my nipples are l33t hax0r! I have an Iframe on another site i have.. but i don't have any forums or admin accounts aside from Cpanel.. you think i should be worried psy?

Is it an iframe like the one we had on here? If so I would be concerned, especially if you didn't put it there yourself.
Qdeathstar
I put it there my self. What it does is it a different webpage on one webpage and refreshes it every 3 minutes inside the frame (instead of refreshing the entire page). mikeselectrical.com
Psy
There's nothing wrong with iframes, it's just if you didn't put them there yourself and the page they're including on your website is forcing you to download a virus, then you don't want that. Your iframe should be ok, although tbh I don't like to use them.
SelfieDK
Thanks Psy.
Even though i practically just created this profile, its good to know that the Staff is up on they're toes, on these things.
Good Work wink.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2014 Invision Power Services, Inc.