📜 ⬆️ ⬇️

Going to the website of a large company - beware of a major virus!

Good evening habrotyata.

Watching TV or walking down the street and seeing the address of the site of a famous brand - you probably think that this is a good portal. After all, they have money for a good design engine. Indeed, most brands have their own good sites, subsites, promotional sites.

But more I care about security! It just did not have the company "Whiskas"! :(
')
Watching another video about Whiskas, I decided to still go to their website, especially since there was a free action - which Russian doesn’t like it? :)

Design of course is great

image

but! Kis2009 immediately, but issued a warning and blocked the file that tried to start! ..
We climb into the logs and what we see?

image

Oh, I ... virus from the left site.

Look html site code

image



Banal iframe.

Most likely, there is a virus on the admin’s computer that has lost the passwords on the site’s FTP site - how can I live there?
And I wanted to take part in the action: (there, by the way, fill in the questionnaire - most likely the data goes to the left.
The questionnaire did not fill. Unsubscribed to tech support - wait :).

I decided to search the site for information - I did not give anything interesting. Has risen to a higher level svoboduud.cn - also issued a virus, but very odd from a ridiculous site :)))

lovisiribkabolishajaimalenkaja.com

Morality? The advertised site is not a guarantee of quality security!

UPD: the script was removed 12 hours after detection.
UPD: I completely forgot to say - for this post I received an invite. Thank :)

Source: https://habr.com/ru/post/69359/


All Articles