What's up with the spam-rediricts?

[Sentenced2Burn]

trying to browse and reply to my PMs lately has led to redirects to spammy adware/malware. Only happens on ASC. Zero issues with my phone, never had this occur previously

[Trayne wr3ck]

Me too. Site is pretty much unusable

[BrendanL]

Same, I get redirected lately to scam/spam websites, glad I found the reddit.

[tvw]

Same here. Any time I click a tab I am redirected to a random spam page. I decided after this incident that it's best to keep all personal info off this website with any exchange from EE. Exchange email's for the security of both parties.

[Sentenced2Burn]

Can an admin or moderator weigh in here? Is this a known issue/being worked on/intentional?

[Fireboy]

This platform is completely unsecured and outdated, that is why. I'm not hating just addressing the elephant in the room.

[RainyEyes]

Originally Posted by Sentenced2Burn

Can an admin or moderator weigh in here? Is this a known issue/being worked on/intentional?

I sent a pm to drake about this 2 weeks ago. No reply.

The "front page" was disabled a couple days after which kinda fixed it. Now it's back and regardless of which section of ASC I click I get that redirect hijack.

Doesn't matter if it's chrome or Firefox even with unlock origin the thing bypasses it and redirects me.

I sent a "complaint" message to the webmaster yesterday. The one that says: your complaint will likely not be read.

It's been going on for a while now so let's see if there's any fix soon.

[HaloSix4]

I'm not having this issue with the Boring Grey theme, standard Blue and redirects like with pretty well every click. Give the Grey a try to see if that changes anything on your end.

[Sentenced2Burn]

Originally Posted by HaloSix4

I'm not having this issue with the Boring Grey theme, standard Blue and redirects like with pretty well every click. Give the Grey a try to see if that changes anything on your end.

Been rocking Boring Grey for years, tried to swap to blue to see if it helped but no dice so far.

Sad to here there's no acknowledgement from management.....

[JiamingQ]

My redirects recently have been sending me to phishing sites...

[RainyEyes]

Looks like ASC has been compromised and a script has been uploaded to redirect pages out.

IN THE MEANWHILE:

If you are not using a browser with an adblocker please consider using one adding the following link to your blacklist until the hijackers catch wind and change the domains/admins respond:
qohxtklfmy.com (April 14 2022 domain changed and no longer in use)
bkojgwewp.com
wyojnsttfnfhw.com
hllpiaaxwdv.com
yelvksiegoxlylg.com
jomtingi.net (comes blacklisted with ublock origin)
grootcho.com (comes blacklisted with ublock origin)

This should stop the redirects/popups but it's not guaranteed to last forever. Until an admin is able to respond to the malicious script removal; if the popups/redirects return despite the blacklisting i will investigate and update the post with more malicious domains to add.

Evidence on
Line 50 > injected script
and
Line 11 > inject script




I'm not sure if this means that the website has been indeed hijacked and if information exchange is now vulnerable however I would recommend to err on the side of caution.

Do what you think is right with this information.

[Drakker]

I reported it to upper management a while ago, they did something at first and it helped, but I have the feeling that the site just gets re-infected over and over again. The software for the site is severely outdated, there's not much that can be done other than upgrading to the latest version. But that's like a 10 years jump in technology, its going to be time consuming, not sure the owner is willing to do it, otherwise it would have been done a while ago.

[Kungpow]

At some point I would like to see some sort of requirement to post topics or comments. Some other forums implement this and it seems to help with preventing spam.

[Ratters]

Duck Duck Go Browser shows no ASC website at all (when searched) for four days so something very screwy is going on

[tvw]

Just saying the site has seemed to be clear of the redirects for the last couple days at least on my end.

**Edit** 4/24/2022, Spam redirects still here. Mobile and desktop