3 ms·
Please don't link to mac4n6, it serves malware on some page loads. The article author is aware of it but apparently doesn't have the ability to fix the issue
by kevingadd 9y ago
Please don't link to mac4n6, it serves malware on some page loads. The article author is aware of it but apparently doesn't have the ability to fix the issue
- Sephr 9y agoWhat kind of malware did you run into?
- kevingadd 9y agoIt was a malware dropper masquerading as a Firefox update. I hit it when I visited this page a few days ago and so did someone else.
- guessmyname 9y agoYou can see it here — https://twitter.com/iamevltwin/status/976627634066132992 https://twitter.com/iamevltwin/status/976627634066132992
- mediocrejoker 9y agoNot calling you out but I'd like to see a source for this. A quick web search for mac4n6 malware didn't turn up anything.
- kevingadd 9y agoSource: Me, and at least one other person on twitter after I mentioned it there.
- guessmyname 9y agoHere is the source — https://twitter.com/iamevltwin/status/976627634066132992 https://twitter.com/iamevltwin/status/976627634066132992
- SyneRyder 9y agoTo save others a click, that's the author of the website confirming that the site was compromised by a code injection attack via Squarespace control panel.
- deleted 9y ago[deleted]
- stagbeetle 9y agoAfter doing a quick sweep of the network and processes, I didn't find anything overtly malicious (unless you count 6 MB pages for a blog, 150k lines for squarespace's JS, and 3000 rules over 400KB).
- kevingadd 9y agoWhen I last examined it, the malware was loading from a domain called eventsbysteph. If the page still pulls js from there then the malware's still around (doesn't activate on 100% of loads)
- stagbeetle 9y agoI'm only getting typekit, squarespace, the auther's other domain for the blog, and google analytics -- with ublock off for all pages.