Malicious Website?

[thelonetiel]

I went to post today and got a warning from Firefox about Neocolours being a "Reported Attack Page!" in angry red.

It directed me to this page:
http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://www.neocolours.me.uk/forum/index.php

Notably saying:
Of the 4 pages we tested on the site over the past 90 days

Comments

[wingsrising]

Ditto here. Anyone have news?

[ailiel]

Appears we've been infiltrated by something. Neocolours is down and interestingly enough a lot of Neo is down too, like the neoboards. They've directed me to go outside and play but I'm at work. Where to chat...

I also stupidly allowed the thing prompting me the last time I visited the NC. But my security software corrected my stupidity and blocked it. I still changed my secret word.

[eofs]

FYI, Jazzy has broken the main page and forum page in order to take them down whilst she tries to deal with this.

[kantark]

I've never seen this warning before having used Firefox for years - is it a new thing or maybe I just don't visit those kind of sites? (Presumably Google automatically gets a nice free record of every Firefox user's browsing history out of this, too. Lucky them!)

Neo is running like treacle, and the boards are still down. This might be connected to the attack, or maybe to the 'surprise' expected on the 29th that they mentioned last week. Other Neo helpsites I'm familiar with all seem to be OK.

Eep.

[eofs]

I get it every so often, sometimes on a new site I've just come across, other times it's when a site I frequent has been compromised as here. It's definitely not unknown to me.

[hobben]

Just in case anyone's not seen the other thread on the_nc or the forums, the site's back up and malware free!

Sorry the response here took a while, I've been busy sorting the site out and then doing my day job.