https://springfiles.com/ is compromised?

https://springfiles.com/ is compromised?

Discuss your problems with the latest release of the engine here. Problems with games, maps or other utilities belong in their respective forums.

Moderator: Moderators

Post Reply
User avatar
The Yak
Posts: 344
Joined: 20 May 2012, 05:36

https://springfiles.com/ is compromised?

Post by The Yak » 24 May 2018, 18:56

Trying to load unauthenticated scripts and sketchy textwall appearance.
0 x

abma
Spring Developer
Posts: 3560
Joined: 01 Jun 2009, 00:08

Re: https://springfiles.com/ is compromised?

Post by abma » 25 May 2018, 11:20

can you provide details? (screenshot / urls / filenames of the scripts)

i don't see what you mean...


i don't maintain the page, jj does/did: the accesses to google look weird. I guess i'll add Access-Control-Allow-Origin and/or a Same-origin policy.
0 x

User avatar
The Yak
Posts: 344
Joined: 20 May 2012, 05:36

Re: https://springfiles.com/ is compromised?

Post by The Yak » 25 May 2018, 19:15

It seems to be normal now.
0 x

User avatar
Jonny5isalivetm
Posts: 168
Joined: 04 Jul 2006, 02:43

Re: https://springfiles.com/ is compromised?

Post by Jonny5isalivetm » 27 May 2018, 01:04

I got a similar bogus message while trying to load spring files recently.. again mustve been some sort of script andit loaded some crapware page your computer infected blabla

Perhaps the site is infected..
3 x

User avatar
The Yak
Posts: 344
Joined: 20 May 2012, 05:36

Re: https://springfiles.com/ is compromised?

Post by The Yak » 27 May 2018, 22:52

It happened again. Springfiles redirected to this thing:
Image
Attachments
springfileserror2.jpg
(293.06 KiB) Not downloaded yet
1 x

raaar
Metal Factions Developer
Posts: 817
Joined: 20 Feb 2010, 12:17

Re: https://springfiles.com/ is compromised?

Post by raaar » 27 May 2018, 23:52

!

I saw the above page too. It shows a popup.

Image

it's the second time today, but in the meantime I used the site just fine.
Attachments
springfiles_borked.jpg
fake security warning
(228.18 KiB) Not downloaded yet
0 x

User avatar
Jonny5isalivetm
Posts: 168
Joined: 04 Jul 2006, 02:43

Re: https://springfiles.com/ is compromised?

Post by Jonny5isalivetm » 28 May 2018, 06:13

yea I got that same page I got past it with a page reload then springfiles worked normally
1 x

abma
Spring Developer
Posts: 3560
Joined: 01 Jun 2009, 00:08

Re: https://springfiles.com/ is compromised?

Post by abma » 28 May 2018, 17:33

i've enabled several security headers in apache:

Header set Access-Control-Allow-Origin "https://springfiles.com"
Header set X-XSS-Protection "1; mode=block"
Header set Content-Security-Policy "default-src 'self';"
and found a lot of .php files modified / reverted these changes via git.

also i've deleted / disabled A LOT of drupal modules: this doesn't fix the real cause of the problem but should reduce the risk a lot.

not very satisfactory but should work for now. :(
2 x

User avatar
Forboding Angel
Evolution RTS Developer
Posts: 14606
Joined: 17 Nov 2005, 02:43

Re: https://springfiles.com/ is compromised?

Post by Forboding Angel » 29 May 2018, 19:05

Make sure you are running the latest version. Don't skimp on updates.
0 x

User avatar
PicassoCT
Journeywar Developer & Mapper
Posts: 10238
Joined: 24 Jan 2006, 21:12

Re: https://springfiles.com/ is compromised?

Post by PicassoCT » 02 Jun 2018, 05:04

Dear god, a leprosy case.

impure,
IMPURE,
IMPURE!

This all happend because you touch yourself at night and do not donate to the picasso foundation!
0 x

Post Reply

Return to “Help & Bugs”