History : Hacker has attacked our forum ! dated : 8th of November 2007

:o
I came across some interesting history about our forum (Avast Forum) that I did not know …
dated : 8th of November 2007, 14:44 GMT

Avast Forum Hacked, Users at Risk! The attackers attempted to install malware By Bogdan Popa, Security and Search Engines Editor


Although it was first only a rumor, it's official this time: the Avast forum was hacked and some dangerous files were attached in order to install malware on visitors' computers. It appears that some of the antiviruses detected the problem but some of the unprotected users may have their computers infected. A post on the AnandTech forum reported the problem, the user nicknamed "lusher" being among the first ones who discovered the glitch. It appears that NOD32 and F-Prot identified the malware but it's not yet confirmed if Avast managed to protect its users against the forum threat.

“The AVAST forum was hacked and an iframe was inserted to some malicious site that was using a security exploit to install malware! They pulled the forum offline now, but I was nearly hit, when I visited the forum yesteday, I got a message from my antivirus, I thought it was a FP , but just quarantined it anyway and thought nothing of it and then continued on my way. But I guess I was wrong!” lusher wrote on the AnandTech forum.

“I guess you must never let your guard down, even in ‘trusted’ sites. If you can’t trust antivirus sites, who can you trust? Oh yeah they pulled the forum down now. But it was on there for at least 24 hours…”

At this time, the forum is up and running and it seems like the Internet Explorer users are the only ones affected by the malware. Obviously, the IE engine based browsers are also affected. Firefox and Opera clients were not in danger, another forum post on the Avast website stated.

“Basically something hacked the forum Simple Machines PHP software injecting an iframe tag in to each page as it was loaded, that page tried to infect users with the storm worm. Those with Firefox or Opera weren’t vulnerable but those with IE or a clone were vulnerable to attack, however the web shield blocked that attack,” DavidR wrote on the Avast forum.
… THE END …

    Keep your Enemy close, but keep you Avast closer.

This is really worthless as a) it is over two years and a half years old (ancient history in malware terms) and b) the vulnerability in the forum software was closed with a security update for that software.

Now hacked sites are the most common means of infection.

:smiley: That’s why they call it history… :smiley:

That was just a great story :slight_smile:
So much time I’ve been in avast forum…I never got an infection
Even with the forum’s link tested it was positive then how come there is a virus??

That guy is stupid to the square…

what the hell is that doing in the avast! Free/Pro/Suite section ??? + as said that’s really old ::slight_smile:

edit: @ taztime: there are other ways to get involved into a web based forum… :smiley:

Well this shows how effective their products are ;D

Si
es algo ilogico que en una pagina web de antivirus la hayan hackeado y introducido malware
crei que estaba seguro
pero no
ahora ya sabemos >:( >:( :-X
XD
XD
XD
;D

NO ES POSIBLE QUE EN UNA PAGINA DE ANTIVIRUS LO HACKEEN Y LE METAN VIRUS(MALWARE)

:stuck_out_tongue: :cry: >:( >:( >:( >:( >:( >:( >:( >:( >:( >:( >:( >:( >:(,etc,etc,etc,etc,etc,etc…

this should go in the general section or something…

yeah…or just be completely deleted.