You all just got infected with ransomware or a coin miner or some other shit

You all just got infected with ransomware or a coin miner or some other shit.

FUCK THIS SITE! FUCK YOU MOOK!

reverse.it/sample/b9a80ddbaf41d303b0ed9abb0f6aabf5f851dd39909aaead3cb3257474fd7dc4?environmentId=100

Other urls found in this thread:

piguiqproxy.com/argon.js
reverse.it/sample/b9a80ddbaf41d303b0ed9abb0f6aabf5f851dd39909aaead3cb3257474fd7dc4?environmentId=100
the-specific-worded-bait-of-that-banner-written-like-this
twitter.com/SFWRedditImages

>not using clover

>not using dashchan

Probably just windows

Not using Overchan

>infected with ransomware
tell 'em yo poor

Dude that's nothing, stop worrying about stupid things like that.
Jesus, you guys go full autism sometimes, there's nothing to worry about, fucks sake.

Does anyone have the file? I want to run it through some other shit. piguiqproxy.com/argon.js 403s and reverse.it wants you to prove you're a "legitimate cybersecurity researcher" to download samples.

fuck off chink moot

More roleplaying garbage.

>Contains ability to lookup the windows account name
>Reads the active computer name
>Reads the cryptographic machine GUID
OH GOD RANSOMWARE AND MINERS
it's clear this is the test run we don't fucking know what chinkmoot is trying yet

but the debugger doesn't show any js files from that domain being requested. yet.

forgot my image

It's just dormant for now

This is shady enough that it's waiting on the right time to deliver the payload.

It not being fixed by now is indicative that gookmoot is up to something, expect malicious code to go live on Sup Forums servers soon, blacklist this site immediately it can no longer be trusted.

...

So where am I going to post now?

The site is still minimally functional when blacklisted. None of the fancy js features will work including catalog however. Just pretend you took a time machine to 2004.

Does this say it only effects old versions of windoes?

>download a JS file
>default JS file association with wscript.exe on windows
>record result of running the script against wscript.exe in windows, which is totally different than running in browser
dumb dumb dumb

it's not an accurate result.

it's still shitware and I resent hiroyuki for putting it in and I block it via userscript but it's adblock circumvention, not a miner/ransomweare.

At a glance it is only anti anti-adblock but these domains are some of the shadiest I've ever seen on an allegedly non-compromised website. 3 new domains popping up overnight isn't an anti-adblock sentiment, it's clearly something incredibly malicious waiting to happen.

>trusting gookchinkzipperheads
The yellow menace is at it again. America must invade and seize the servers.

I just ran a scan with McAfee and it says I'm 100% clean so nice try fearmonger

two of the domains have existed for a while and have been discussed for other sites
smcheck.org was only registered on december 3rd, 2017 however.

It doesn't work that way

confirmed

Unconfirmed.
reverse.it/sample/b9a80ddbaf41d303b0ed9abb0f6aabf5f851dd39909aaead3cb3257474fd7dc4?environmentId=100

They can't infect me. I'm on linux.

Android/Linux?

>this thread
>our situation
I AIN'T AKIRA BUT DON'T PUSH ME
AAAAAAAAAHHHHHHHHHHHHHHHHHH

Why is there so much phoneposting cancer on Sup Forums, a supposed technology board?

Smartphones are technology, though?

No, they're insecure (from hardware to firmware to software), consumerist gimmicks. Consumerism isn't technology.

>Minerblock
lol

>tfw when unironically considering plebbit
Gookmoots got a history of being extremely shady, I don't see why you'd think this is nothing

UPDATE YOUR AD BLOCKER'S FILTER RIGHT TF NOOOOOOOWWWWWWWWWWWWW

AM I SAFE YET!? IS CHROME SAFE YET!?

It's pretty ironic when the phones aren't getting affected by this isn't it?

>durr should I have a sell on passes for holiday
>maybe more revelant ads
>less botnet ads so people aren't willing to block
>no let russian code inject into the site that will give me tons of monies

hiro a shit

WE GOT IT DONE.

+1 on the thousands of reasons to purchase an iMac Pro.

got what done? piss off the userbase and have some flee the sinking shit?

>on a phone
I really don't care, Yall get fucked

No I didn't because I'm not a retard that goes around letting random scripts run on my computer.

I was fine with the J-list ads, but fuck the rev content adds that track your browsing. I wish I could have been smart enough to block only one of them instead of both.

only retards still run windows.
I stopped using that shit back in 1997.

>Paying ransom to unlock your reaction face folder.

>js script
>payload
>trojan

How do these fucks get on this board2

>not using ublock orgin custom filter
>not using Sup Forums X and Oneechan

>he doesn't know
LMFAO

>tfw ads by Mgid
how do I get rid of this cancer?

>script kiddies flipping out over literally nothing
you need to be careful because you represent this board, guys, and its making you look bad.

>trying linux in 1997 from a magazine cd
>winmodem doesn't work
¯\_(ツ)_/¯

>shill against net neutrality to make le libtards mad
>get extremely butthurt when Sup Forums emulates the abuses of big ISPs without the leash of Net Neutrality
Hahahaha, you had this coming trumpfags

>android and windows kiddies affected by this
>meanwhile us superior iPhone and MacOS users have nothing to worry about

LMAO GET FUCKED KIDDOS

Install Gentoo is legit advice ITT.

Install Gentoo.

whats happening to you guys?
im on windows 10, opera, ublock and i see nothing wrong

I'm using ublock origin and 4chanx. Nothing weird has happened. Am I died?

Sup Forumsorhill pushed a fix for ublock, nothing to see anymore.

I haven’t had anything happen to me all day. Am I lucky Sup Forums?

Jim warned you guys post GG
You asked for this

Has anyone posted a fix for Chrome yet?

That's Tetsuo you fucking mongaloid

Well he did say he wasn't Akira.

True.

ublock says 0 requests blocked but no ads are displayed. i don't get it.

those other two sites disappeared from noscript/ublock

that's good, right

>Consumerism isn't technology.
>Technology was literally created for the needs of society

gb2college and lrn some STS.

y-yeah r-right

How do I stop the site from turning into text-only when I have uBlock Origin on? It's very obnoxious.

Delivering a payload via js is not a new concept. Stick to your battlestation threads kiddo.

purge and update your filters.

also won't hurt to update Sup Forums X if you're using it

lol 100+ years later and you're shilling a dead soap brand

...

the servers are located IN the US you absolute mong

How do i know if ive been infected by it

How does it work then? So scanning my computer with MBAM right now is pointless?

...

None of the sites are showing up anymore. Did Hiroshimoot actually fix it?

...

adglare still shows up for me. ive been sitting with scripts and ublock filters back and forth for over an hour now.. i cant fucking figure it out. one script breaks one board, some tweaking breaks threads...jfc im so tired.

are any of you getting loads of connection errors now?

So this shit only happens on chrome for some reason. And Moot now works for Google....

I don't know why, but the ublock fix by gorhill doesn't fix the CSS for me. So I have to continue using the greasemonkey fix.

It's javascript, fucking retards, it's sandboxed. No js script can install anything on your computer as a native application.

hackerman... more like... handsomeman o_o

fuck it, I'm officially too lazy to deal with this shit. The miners win.

...

I see you too are a man of culture

(With culture meaning an auyistically hardened Firefox)

What if I clicked on one?
(I'm an idiot, I know)
Was in an Incognito window. Had uBlock Origin and Privacy Badger running, although PB hadn't blocked the new dodgy domains yet.
The URL when hovering over the banner wasn't proper, it was
>the-specific-worded-bait-of-that-banner-written-like-this
incomplete
When I clicked, it appeared simply to open a new tab of the same thread I clicked from.

How badly have I fucked up?
(Posting from Clover now)

...

...

this

Oh no that sucks
I guess I'll reinstall Windows and transfer my files from my external drive

ublock updated script is apparently fucked, apparently the thread for it got deleted by a mod, can anyone confirm?

Thanks anons, gookmoot btfo

So what should I do with uBlock? I got it a few weeks ago

>not running your own recursive resolver and responding with fake pointers to a safe empty web server for extra cancerous domains
shiggy

Sup Forums.org##script:inject(abort-current-inline-script.js, String.fromCharCode)

That goes under "My Filters". Just copy and paste it, it's that easy

>What are exploits