[Major SAGA] HWZ hosting malware!

  • Have you been Scammed?
    Follow this advisory from National Crime Prevention Council (NCPC) or call ScamShield Helpline 1799. More info

Alphas

High Supremacy Member
Joined
Oct 6, 2004
Messages
41,191
Reaction score
5,623
adobehijack.jpg


This ALWAYS happen on HWZ forums, yet it is not from adobe since I have turned off update from adobe. The prompt to install adobe flash will randomly start when surfing the forums and it is a malware site.

A check on whois shows it originates from Singapore!
The domain files.red-2-small-button.com registered by Whois Privacy Corp. was initially registered in February of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Singapore, Singapore within Singapore which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Download Reason Core Security - Free anti-malware software
Registrant:
Whois Privacy Corp.


Registrar:
TLD REGISTRAR SOLUTIONS LTD


Server location:
Singapore, Singapore (SG)


Create date:
Wednesday, February 4, 2015


Expires date:
Thursday, February 4, 2016


Updated date:
Wednesday, February 4, 2015


ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US


Root domain:
red-2-small-button.com


Whois:
1 red-2-small-button.com record

Now I have to block, ban and lock the phishing website from prompting me the stupid adobe update.

update with quick fix

For those affect, even you did not encounter, you might want to take precaution since it can happen.

adblock plus filter
adobehijack3.jpg
 
Last edited:

wlalala

Greater Supremacy Member
Joined
May 24, 2013
Messages
81,918
Reaction score
8,140
please post your concerns to the membership support forum

Vijay must investigate
 

Litmuss

High Supremacy Member
Joined
Oct 11, 2007
Messages
40,163
Reaction score
2,394
Hwz always direct me to the Apple AppStore when using my iPad....
 

Otokiru

Arch-Supremacy Member
Joined
Nov 16, 2008
Messages
17,258
Reaction score
2,105
in b4, u the only 1 has the adobe flash popup when everyone of us here doesnt....
in b4, u self pwn...
 

TedBoi

Master Member
Joined
Aug 15, 2009
Messages
4,496
Reaction score
174
I have no flash in my desktop browser, and I never saw this popup
 

informal

Senior Member
Joined
Jan 1, 2000
Messages
1,697
Reaction score
1
TS self pwn.. surf too much porn then kena.. then blame HWZ>. i bo kena at work or home at all
 

wlalala

Greater Supremacy Member
Joined
May 24, 2013
Messages
81,918
Reaction score
8,140
Try using adblocker in the mean time.

It might be one of the ads.
 

kingtiger2014

Banned
Joined
Apr 29, 2015
Messages
1,983
Reaction score
1
I also kena...... I posted a thread about it also. Pple say its my com. I thought my com got problem..... so I just ignore it.
 

Alphas

High Supremacy Member
Joined
Oct 6, 2004
Messages
41,191
Reaction score
5,623
It is coming from here, some kind of browser hijack, but I am not sure it affect everyone.
 

Alphas

High Supremacy Member
Joined
Oct 6, 2004
Messages
41,191
Reaction score
5,623
For those affect, even you did not encounter, you might want to take precaution since it can happen.

adblock plus filter
adobehijack2.jpg
 

shidenx

Great Supremacy Member
Joined
Apr 17, 2001
Messages
50,335
Reaction score
3,574
I think ts ownself view too much prawn all get the virus ads lol
 
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ Forums. Forum members and moderators are responsible for their own posts. Please refer to our Community Guidelines and Standards and Terms and Conditions for more information.
Top