Cookie consent malware

[Kaya]

I noticed a new cookie warning at the MD homepage and while in itself that is not a bad thing, the specific script used for this is said to contain malisious code.

https://www.mywot.com/en/scorecard/cookie-consent.org?utm_source=addon&utm_content=rw-viewsc

https://www.ohow.co/what-is-eu-cookie-law-enforcement-xyz-info-google-analytics/

 

I can't find any real details about the actual malicious part of the code, but copying JavaScript from a self proclaimed 'official' site with a fake adress (whois) might not be the best idea regardless.

[Chewett]

Thanks samon,  mur added this so I will have a look into it

Edited July 9, 2016 by Chewett

[Kaya]

A followup and a major bump:

On my phone (android, dolphin browser) the code gives a pop-up telling me my browser is infected and I need to download a cleaner of sorts, which I haven't tried, but, with a near 100% certainty, must be a virus.

 

EDIT:

They show the message on normal Chrome as well, though only once, so you might have to clear coockies/use private browsing to see it.

Edited July 19, 2016 by samon

[DARK DEMON]

Yup I confirm the above.

[nadrolski]

[AmberRune]

I am bad at the internet but I clicked the install button and it sent me to the chrome webstore with add-on type things

[Kaya]

So I noticed, you still shouldn't install it though (and if you did uninstall it immediately.) Google is known for not having the best quality control regarding what does or does not end up in their app store and there definitely is something wrong with what they're trying to do.

[Chewett]

Will try and deal with this ASAP, Sorry I have been really busy.

[Muratus del Mur]

i don't see any warning anymore, it was fixed short time after it appeared, does anyone still see it? if so , on what url exactly?

 

thanks

[Chewett]

I had a quick look too, cant seem to reproduce it, anyone else get it?

[lashtal]

I tried Chrome but nothing strange happened.

(but I use Mac, I guess I don't count) 

[Ungod]

I had it too and actually installed that extension

then I removed it..google scam? 

[Chewett]

I think users who had issues had it cached somewhere, according to Mur he removed it pretty quickly.

If anyone sees this give me a shout (please email or forum PM me) as IMO this is highly important, we dont want to be giving our users viruses

[Chewett]

Closing, again this shouldnt be here anymore.