Forums / Maintenance / Report Problems

27,912 total conversations in 1,746 threads

+ New Thread


Redirect to "http://backwarder.pro/dor?sub=default" probably malicious

Last posted Mar 07, 2017 at 09:40AM EST. Added Mar 04, 2017 at 05:26PM EST
4 posts from 3 users

Hey! This is mostly aimed to admins. About ten minutes ago I accessed the site via bookmark but was immediately redirected to the page in the title. The page kept asking me to install an extension and forcing full screen mode, until I had to close the tab. This has all the looks of being malicious. So heads up to admins in case this is something from their side (which I believe is the case) and to users to avoid install anything like this.

I've tried multiple ways to access the site from bookmarks, and haven't been able to reproduce your problem. If you have any more information, that would be appreciated. Any information about how to recreate the problem is welcome.

First off, the site you've linked seems to be targeting chrome users only, by trying to force a chrome webstore-hosted download and abusing fullscreen notifications with regular pop-ups. Almost certainly malicious, but entirely avoidable by clicking "cancel" repeatedly, suppressing notifications from the window, or forcing chrome to close.

If you're facing this problem persistently, I'd recommend you to switch over to another browser in the meantime (Firefox or Safari are completely unaffected, but it is unknown if they are similarly redirected). I would also ask that you send James a PM.

Last edited Mar 05, 2017 at 02:12AM EST

Yeah It happened on another page so I'm positive it's not from this site. I checked my router settings and I think it was hacked, the dns didn't match the one my ISP is supposed to be giving me. This happened with my previous router, it had a vulnerability which allowed external ips to change settings without credentials. Seems it's happening again. I'll have to call customer service and sort it out. But I'm pretty sure it has nothing to do with the site. Thanks for the reply anyway.

malicious redirects were a possibility here once though, I'm not sure if it's still a thing here ever since I got an adblock, if you don't have one then I'd recommend it just to be safe.

Last edited Mar 07, 2017 at 09:41AM EST
Skeletor-sm

This thread is closed to new posts.

Old threads normally auto-close after 30 days of inactivity.

Why don't you start a new thread instead?

Greetings! You must login or signup first!