(Resolved) Trojan horse on homepage

Thanks for the warning.

I've secured the Twinkies and the bourbon. (I couldn't save the cats.)

IT Security has been alerted.
 
Thanks soulmist and diGriz!

The issue is resolved now.
 
Last edited:
The issue is still occurring as of 7:16 pm MST - 1/24/2015
 
The issue is still occurring as of 7:16 pm MST - 1/24/2015

Avast may not be updated that the issue is resolved. We just ran a check from Sucuri and VirusTotal and Spoofee is now showing clean. Thank you for bringing this to our attention!
 
Last edited:
You're certainly welcome! I love spoofee, so I really was disturbed to see it in the first place. Issue seems to be gone for me as well now. Thank you for the quick response.
 
Apologies for bringing this up again, but Avast is still showing a trojan horse javascript command being run as of today at 4:39 MST.

More information can be found here:

https://www.avast.com/en-us/lp-pr-v...03&p_hid=b9d966c7-466a-4ac3-a406-2bcd48043e68

The actual javascript link is: hxxp://www.spoofee.com/mobile/addtohomescreen/addtohomescreen.js
(with the xx replaced with tt in http)

I have added the script to my adblocker, so I will not be reporting further incidences - but just so you are aware it is still an issue as of today.
 
Thank you so much soulmist and spaz.

The addtohomescreen is legitimate, but we went ahead and removed it.
It basically pops up an annoying "hey save this page to your bookmark" if you're browsing from your mobile device.

Removed :)

Now we should be good :)
 
Trojan Detected

Kaspersky is detecting HEUR:Trojan.Script.Iframer on every page i go to on this site when not logged in. Signed up for an account to post this message and it doesnt seem to happen when im logged in.

File
hxxp://www.spoofee.com/forums/clientscript/vbulletin_md5.js?v=422
 
Last edited by a moderator:
Thanks sbridgers and Spaz! This should be resolved now :)
 
Back
Top