https://springfiles.com/ is compromised?
Moderator: Moderators
https://springfiles.com/ is compromised?
Trying to load unauthenticated scripts and sketchy textwall appearance.
Re: https://springfiles.com/ is compromised?
can you provide details? (screenshot / urls / filenames of the scripts)
i don't see what you mean...
i don't maintain the page, jj does/did: the accesses to google look weird. I guess i'll add Access-Control-Allow-Origin and/or a Same-origin policy.
i don't see what you mean...
i don't maintain the page, jj does/did: the accesses to google look weird. I guess i'll add Access-Control-Allow-Origin and/or a Same-origin policy.
Re: https://springfiles.com/ is compromised?
It seems to be normal now.
- Jonny5isalivetm
- Posts: 186
- Joined: 04 Jul 2006, 02:43
Re: https://springfiles.com/ is compromised?
I got a similar bogus message while trying to load spring files recently.. again mustve been some sort of script andit loaded some crapware page your computer infected blabla
Perhaps the site is infected..
Perhaps the site is infected..
Re: https://springfiles.com/ is compromised?
It happened again. Springfiles redirected to this thing:
- Attachments
-
- springfileserror2.jpg
- (293.06 KiB) Not downloaded yet
Re: https://springfiles.com/ is compromised?
!
I saw the above page too. It shows a popup.
it's the second time today, but in the meantime I used the site just fine.
I saw the above page too. It shows a popup.
it's the second time today, but in the meantime I used the site just fine.
- Attachments
-
- springfiles_borked.jpg
- fake security warning
- (228.18 KiB) Not downloaded yet
- Jonny5isalivetm
- Posts: 186
- Joined: 04 Jul 2006, 02:43
Re: https://springfiles.com/ is compromised?
yea I got that same page I got past it with a page reload then springfiles worked normally
Re: https://springfiles.com/ is compromised?
i've enabled several security headers in apache:
also i've deleted / disabled A LOT of drupal modules: this doesn't fix the real cause of the problem but should reduce the risk a lot.
not very satisfactory but should work for now.
and found a lot of .php files modified / reverted these changes via git.Header set Access-Control-Allow-Origin "https://springfiles.com"
Header set X-XSS-Protection "1; mode=block"
Header set Content-Security-Policy "default-src 'self';"
also i've deleted / disabled A LOT of drupal modules: this doesn't fix the real cause of the problem but should reduce the risk a lot.
not very satisfactory but should work for now.
- Forboding Angel
- Evolution RTS Developer
- Posts: 14673
- Joined: 17 Nov 2005, 02:43
Re: https://springfiles.com/ is compromised?
Make sure you are running the latest version. Don't skimp on updates.
Re: https://springfiles.com/ is compromised?
Dear god, a leprosy case.
impure,
IMPURE,
IMPURE!
This all happend because you touch yourself at night and do not donate to the picasso foundation!
impure,
IMPURE,
IMPURE!
This all happend because you touch yourself at night and do not donate to the picasso foundation!