MTGSalvation a haven for Malware

Post about Magic Rumors here!

Moderator: rezombad

User avatar
ein
Regular Member
Posts: 150
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Fri Sep 21, 2012 9:29 pm

MTGSalvation a haven for Malware

Postby ein » Wed Nov 14, 2012 2:09 pm

Recently, MTGSalvation was found to be a Malware distributor, according to several web browsers. This notably coincides with the apparent disappearance of its longtime owner, Hanes.

MTGSalvation is in a descent similar to the former humor site, MiseTings, wherein a group of hackers infected the main site during one of the long time periods where the owner, Mike Bregoli, was completely absent from maintaining the website. Under this MT timeline, it is likely MTGS has less than 6 months before Malware cripples the site and infects large swaths of computers of its userbase.
Last edited by ein on Wed Nov 14, 2012 4:03 pm, edited 1 time in total.

User avatar
Kaitscralt
A frog among toads
Posts: 21216
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:48 am

Postby Kaitscralt » Wed Nov 14, 2012 2:39 pm

I've heard it was a phisherman testing out his new rod and reel.
Standard hobos who play budget garbage should be looked upon with suspicion.

User avatar
Captain Murphy
The highest high, I'm Ayatollah
Posts: 5219
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Fri Sep 21, 2012 4:55 pm
Location: Nilbog St

Postby Captain Murphy » Wed Nov 14, 2012 3:20 pm

Oh god. The was real curse all along...
It's too bad we don't have a secret subforum where we can coordinate troll attempts where only we can see so that we don't have to catch on because only one of us is an actual rocket scientist.
I am particularly interested in committing internet genocide
in soviet gutter, New York somewhere in you

User avatar
Thrillho
A clever, smart boy
Posts: 14021
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Sep 18, 2012 12:14 am
Contact:

Postby Thrillho » Wed Nov 14, 2012 4:27 pm


admin
Site Admin
Posts: 1235
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Feb 06, 2007 1:36 pm

Postby admin » Wed Nov 14, 2012 5:56 pm

If you notice this site is getting the same alerts, this is just because there are some links to MTGS in the SYM thread discussing the bannings/sale over there.

Hope MTGS sorts these things out because otherwise our links to there may put us at a slight risk of being blacklisted too if they don't solve their issues in a reasonable timeframe.

User avatar
( G_R )
Tire Aficionado
Posts: 14646
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:15 am
Location: Mania

Postby ( G_R ) » Wed Nov 14, 2012 6:15 pm

So MTGS haxx'd us? :no:
That explains why people keep coming over for chicken nuggets

User avatar
Azrael
Tire Aficionado
Posts: 890
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Sep 18, 2012 5:42 pm

Postby Azrael » Wed Nov 14, 2012 6:52 pm

I wonder if this was a disgruntled member or a third-party.

User avatar
ein
Regular Member
Posts: 150
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Fri Sep 21, 2012 9:29 pm

Postby ein » Wed Nov 14, 2012 6:58 pm

I wonder if this was a disgruntled member or a third-party.
Most definitely a third party. MTGS has had bad ads in the past (one even passively, in that I didn't click on it, infected a computer of mine a couple years ago). It's a consequence of poor ownership and a terrible monetization scheme (using sketchy ad companies, etc).

User avatar
( G_R )
Tire Aficionado
Posts: 14646
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:15 am
Location: Mania

Postby ( G_R ) » Wed Nov 14, 2012 7:00 pm

I think it's those ads. Hannes hasn't paid attention to that, and the reports of malware have been in CI for a while. Their former technician never had access/power to fix that, either.

EDIT: What ein said.
That explains why people keep coming over for chicken nuggets

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:00 pm

Hannes isn't "absent" from the site. Right now, he's going through some real-life transitions I am, quite literally, NOT at liberty to divulge other than what is going on for him takes far more precedence over a site dedicated to Magic: the Gathering. He has been working on the site in his very little spare time, but he is still around.

As for the malware issue, Chrome is currently blocking the site, and I won't be surprised if Firefox and IE are doing the same. Truth be told, it's not a site that would be targeted under normal circumstances by a group of hackers. This has the hallmarks of a bunch of children, and possibly people who were banned during the recent sweep.

admin
Site Admin
Posts: 1235
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Feb 06, 2007 1:36 pm

Postby admin » Wed Nov 14, 2012 7:04 pm

Fahey, I can tell you that no member of this site who has been banned in MTGS is involved in any hacking activities. On the contrary, we had recently a banned member of MTGS alerting an MTGS aministrator (Galspanic) to the possibility of a hacking of the site by a third party, according to a rumor that has been divulged to one of the members in this site. Galspanic reportedly forwarded the information to Hannes.

User avatar
ein
Regular Member
Posts: 150
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Fri Sep 21, 2012 9:29 pm

Postby ein » Wed Nov 14, 2012 7:04 pm

Hannes isn't "absent" from the site. Right now, he's going through some real-life transitions I am, quite literally, NOT at liberty to divulge other than what is going on for him takes far more precedence over a site dedicated to Magic: the Gathering. He has been working on the site in his very little spare time, but he is still around.

As for the malware issue, Chrome is currently blocking the site, and I won't be surprised if Firefox and IE are doing the same. Truth be told, it's not a site that would be targeted under normal circumstances by a group of hackers. This has the hallmarks of a bunch of children, and possibly people who were banned during the recent sweep.


Whatever, dude. If hanes is not absent, why hasn't this cleared up yet? I think the data speaks for itself. This is EXACTLY the same thing that happened to MT, so....

User avatar
( G_R )
Tire Aficionado
Posts: 14646
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:15 am
Location: Mania

Postby ( G_R ) » Wed Nov 14, 2012 7:06 pm

It's the ads, I tells ya. I dare not go in there, but if you look in CI there's a thread about Malware from a while ago. No actions were taken to fix that problem and Google Crawler finally hit the site with a blacklist. Blaming it on banned members is naive at best, ill-intended at worst.
That explains why people keep coming over for chicken nuggets

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:08 pm

Hannes isn't "absent" from the site. Right now, he's going through some real-life transitions I am, quite literally, NOT at liberty to divulge other than what is going on for him takes far more precedence over a site dedicated to Magic: the Gathering. He has been working on the site in his very little spare time, but he is still around.

As for the malware issue, Chrome is currently blocking the site, and I won't be surprised if Firefox and IE are doing the same. Truth be told, it's not a site that would be targeted under normal circumstances by a group of hackers. This has the
hallmarks of a bunch of children, and possibly people who were banned during the recent sweep.
:rolleyes:

Whatever, dude. If hanes is not absent, why hasn't this cleared up yet? I think the data speaks for itself. This is EXACTLY the same thing that happened to MT, so....
So because it hasn't been cleared up immediately, it must be that he's absent!

I mean, there's no way in hell he has a social life as well. Or that he might be having dinner right now after work?

User avatar
( G_R )
Tire Aficionado
Posts: 14646
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:15 am
Location: Mania

Postby ( G_R ) » Wed Nov 14, 2012 7:10 pm

So you have a contact in Curse, and you know Hannes personally? (Real question, not trolling you)
That explains why people keep coming over for chicken nuggets

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:11 pm

So you have a contact in Curse, and you know Hannes personally? (Real question, not trolling you)
I do have a contact in Curse, yes. As for knowing Hannes, I do not. What with having this thing called "The Atlantic Ocean" between us... :P

User avatar
( G_R )
Tire Aficionado
Posts: 14646
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:15 am
Location: Mania

Postby ( G_R ) » Wed Nov 14, 2012 7:14 pm

Well I find it odd that you are defending Hannes, that's all. I mean, not even the MTGS admins have been able to contact him for pressing matters about the site, or at least I have not heard of them getting a "BRB, IRL stuff" message from him.
That explains why people keep coming over for chicken nuggets

User avatar
ein
Regular Member
Posts: 150
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Fri Sep 21, 2012 9:29 pm

Postby ein » Wed Nov 14, 2012 7:14 pm

Hannes isn't "absent" from the site. Right now, he's going through some real-life transitions I am, quite literally, NOT at liberty to divulge other than what is going on for him takes far more precedence over a site dedicated to Magic: the Gathering. He has been working on the site in his very little spare time, but he is still around.

As for the malware issue, Chrome is currently blocking the site, and I won't be
surprised if Firefox and IE are doing the same. Truth be told, it's not a site that would be targeted under normal circumstances by a group of hackers. This has the hallmarks of a bunch of children, and possibly people who were banned during the recent sweep.
:rolleyes:

Whatever, dude. If hanes is not absent, why hasn't this cleared up yet? I think the data speaks for itself. This is EXACTLY the same thing that happened to MT, so....
So because it hasn't been cleared up immediately, it must be that he's absent!

I mean, there's no way in hell he has a social life as well. Or that he might be having dinner right now after work?
What? MTGS has had ad problems for a long time (and that have finally caught up with them). And I recall that at least one recent technician never had his powers turned on, and several Admins have had to wait a
really long time for being turned on as well. When I was on staff, there was *always* these "well, when hanes ever shows up again" comments about stuff that needed doing. These events go back a year or so, and CLEARLY suggest a pattern of absenteeism. That's one looooooong dinner.

User avatar
Yannaria
Tire Aficionado
Posts: 7231
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Mon Sep 24, 2012 6:56 pm
Location: The South in the North

Postby Yannaria » Wed Nov 14, 2012 7:15 pm

past experience leads me to believe that Hannes is just MIA again.

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:18 pm

Well I find it odd that you are defending Hannes, that's all. I mean, not even the MTGS admins have been able to contact him for pressing matters about the site, or at least I have not heard of them getting a "BRB, IRL stuff" message from him.
I can only pass on what Nai told me, and even then I have to be relatively vague in what I say because I told Nai that I wouldn't divulge what he told me. Journalistic integrity, credibility, whatever.

I was actually supposed to have a sit-down and a Q&A with the admins scheduled by now. Nai and I had talked about it, and Galspanic and Megiddo were supposed to be all for it. The only one I understood that was against it was ExpiredRascals, but considering how I didn't trust him since
my appeal to my most-recent suspension, I wasn't too surprised. I was hoping to be able to help put this shit behind them, but it seems they either forgot or aren't going to do it.

User avatar
Yannaria
Tire Aficionado
Posts: 7231
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Mon Sep 24, 2012 6:56 pm
Location: The South in the North

Postby Yannaria » Wed Nov 14, 2012 7:22 pm

why the hell would you be talking to the Admins?

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:25 pm

Is there a reason I shouldn't be talking to the admins?

User avatar
( G_R )
Tire Aficionado
Posts: 14646
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:15 am
Location: Mania

Postby ( G_R ) » Wed Nov 14, 2012 7:27 pm

Is there a reason I shouldn't be talking to the admins?
Be careful, they are corrupt. /JK

I believe he means to ask you what important matters you, a seemingly regular Joe member of Sally, have to discuss with them in what has now come to be known as a "summit".
That explains why people keep coming over for chicken nuggets

User avatar
Yannaria
Tire Aficionado
Posts: 7231
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Mon Sep 24, 2012 6:56 pm
Location: The South in the North

Postby Yannaria » Wed Nov 14, 2012 7:28 pm

You seem to have implied that it is some important discussion that just has to happen, but Expired Rascals is stopping it because he's immature or something. I mean if you were like "oh man I pm'd Nai about something but he never got back to me" it wouldn't have caught me off guard because that happens, instead you were like "We were going to have a sit down Q and A but blah blah"

one sounds far more serious than the other.

admin
Site Admin
Posts: 1235
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Feb 06, 2007 1:36 pm

Postby admin » Wed Nov 14, 2012 7:30 pm

Alright people, if you read something with a link to MTGS in here, you might come with this sort of warning. Rest assured, this is just an alert that there is a link to a site listed as Malware, but you can still browse safely over here.

Image

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:32 pm

Nai and I had been talking off-and-on during the whole debacle that happened recently. Galspanic, Megs, and Nai are the only admins I trust, and I expressed that sentiment to Nai. I never had contact with ER until my suspension appeal in which he basically said, "Yeah, there's no concensus on it you should be suspended, but fuck you you're suspended anyways!"

The point of the Q&A had been to try to narrow down the scope of the questions being asked and give a single post (or several, if necessary) where people could have asked questions they wanted answers to, and the admins would provide the answers. It would have been neater, and if there's anything that we have seen, it's when the admins are able to answer people in a manner like that (most recently, the summit they had with Belgareth that ended up repairing a lot of the issues people had with WCT), the shit tends to die down. That had been my intent.
n
As I said, Nai had been all for it, and from what I understand Galspanic and Megs had been as well. I can only surmise that ER was against it, but as I said I never truted him to do the right thing anyways.

As an aside, it looks like a Google crawler came upon a malicious ad, and not something with direct access to the forums. So, yeah...someone needs to be on top of that.

admin
Site Admin
Posts: 1235
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Feb 06, 2007 1:36 pm

Postby admin » Wed Nov 14, 2012 7:35 pm

OK, thanks for clearing this Fahey, and again, I can assure you that the allegations of malicious attacks to MTGS by banned members also members of this site are totally unfounded. Some people are just paranoid like that.

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:37 pm

As I said, it has the hallmarks of script kiddies, if it had been an attempt at a coordinated attack. Not a group of super 1337 h4xx0rz

admin
Site Admin
Posts: 1235
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Feb 06, 2007 1:36 pm

Postby admin » Wed Nov 14, 2012 7:42 pm

I mean, the thought that someone would buy the theory of a group of former banned members of MTGS joining in another site just to coordinate malicious attacks on websites like some bunch of 12yo script kiddies is something that baffles me beyond belief. Tough I did learn to significantly lower my expectations during these last months.

Image

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:43 pm

Actually, my point had been that if anything, banned former members were a more likely culprit than Anonymous was. Not that it was the exact answer.

admin
Site Admin
Posts: 1235
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Feb 06, 2007 1:36 pm

Postby admin » Wed Nov 14, 2012 7:44 pm

Well, I guess everyone is certainly entitled to have its own theories, as far fetched as these may be.

User avatar
ein
Regular Member
Posts: 150
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Fri Sep 21, 2012 9:29 pm

Postby ein » Wed Nov 14, 2012 7:47 pm

Well, I guess everyone is certainly entitled to have its own theories, as far fetched as these may be.
You strike a smile in me, your stories ring of perjury construed with self empowering theeeeeeeeeemes.

Ah, Eve6!

User avatar
Kaitscralt
A frog among toads
Posts: 21216
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:48 am

Postby Kaitscralt » Wed Nov 14, 2012 7:52 pm

*watches Fahey*
Standard hobos who play budget garbage should be looked upon with suspicion.

FaheyUSMC
Rancor'd to Hell and Back
Posts: 55
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Wed Nov 14, 2012 6:57 pm

Postby FaheyUSMC » Wed Nov 14, 2012 7:55 pm

*watches Fahey*
Roll a Perception check.

User avatar
( G_R )
Tire Aficionado
Posts: 14646
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Sep 20, 2012 12:15 am
Location: Mania

Postby ( G_R ) » Wed Nov 14, 2012 8:11 pm

In other news, I'm not getting the warning anymore from Salvation. Apparently Hannes showed up and shut down the advertisements.
That explains why people keep coming over for chicken nuggets

admin
Site Admin
Posts: 1235
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Feb 06, 2007 1:36 pm

Postby admin » Wed Nov 14, 2012 8:13 pm

Still blacklisted in other sources....

http://sitecheck.sucuri.net/results/for ... vation.com

User avatar
Thrillho
A clever, smart boy
Posts: 14021
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Sep 18, 2012 12:14 am
Contact:

Postby Thrillho » Wed Nov 14, 2012 8:14 pm

Hannes isn't "absent" from the site. Right now, he's going through some real-life transitions I am, quite literally, NOT at liberty to divulge other than what is going on for him takes far more precedence over a site dedicated to Magic: the Gathering.
Do you not know what "absent" means?

Blackhound
prinny dood!
Posts: 2782
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Thu Oct 25, 2012 8:03 pm

Postby Blackhound » Wed Nov 14, 2012 8:15 pm

Malicious attacks on websites

HUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU!!!!!!!!

User avatar
Thrillho
A clever, smart boy
Posts: 14021
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Tue Sep 18, 2012 12:14 am
Contact:

Postby Thrillho » Wed Nov 14, 2012 8:16 pm

So because it hasn't been cleared up immediately, it must be that he's absent!

I mean, there's no way in hell he has a social life as well. Or that he might be having dinner right now after work?
ab·sent   [adj., prep. ab-suhnt; v. ab-sent, ab-suhnt] Show IPA
adjective
1.
not in a certain place at a given time; away, missing ( opposed to present): absent from class.

User avatar
Yannaria
Tire Aficionado
Posts: 7231
(View: POSTS_VIEWTOPIC /POSTS_VIEWTOPIC_INTO)
Joined: Mon Sep 24, 2012 6:56 pm
Location: The South in the North

Postby Yannaria » Wed Nov 14, 2012 8:28 pm

hannes rolled a sneak check


Return to “News and Rumors”

Who is online

Users browsing this forum: No registered users and 0 guests