DO NOT USE Somepage! (Hack Warning!)

Blackmagik

Blackmagik

Back from the dead!
Adventurer
Joined
Jan 3, 2005
Messages
2,931
Location
Winnipeg Manitoba, Canada
Nation Banner
Bastok
Main Job
Bard-Male
Secondary Job
BlackMage-Male
Third Job
Summoner-Male
Server
Quetzalcoatl
FFXI
Blackmagik
This was posted in the other hacked players thread, but a separate thread needs to be made so it can be brought to the attention of the masses.
Do not visit ]]DO NOT USE SOMEPAGE[[.com, or you risk being infected.
iframe.png


A malicious iframe (inline frame) has been placed on the front page of ]]DO NOT USE SOMEPAGE[[.com. It is not known whether it was placed there by the administrators, or an unknown third party that gained access to the website. The iframe loads a page containing a harmful JavaScript exploit that attempts to install a Trojan on the victim's computer. It is unknown what vulnerability the page exploits, but current speculation points here. It is strongly advised that you do not go to ]]DO NOT USE SOMEPAGE[[.com until the issues is resolved. If you believe you have been infected, removal instructions are on the front page of the other thread.(http://bluegartrls.com/forum/viewtopic.php?f=2&t=27226)
Click to expand...

and another poster said this:
I deobfuscated the javascript, it is the realplayer buffer overflow from october this year. You're safe from it if you viewed ]]DO NOT USE SOMEPAGE[[ with firefox or opera, as the exploit only works on the activeX plugin, which those browsers can't use.
You're also safe of course if you don't have realplayer installed at all.
Click to expand...
but im not 100% sure its true

original post: http://bluegartrls.com/forum/viewtopic.php?f=2&t=27256
 
Last edited:
if someone could sticky this so people could know about the current problem
 
lol who uses realplayer
 
Thx for the heads up.

I just visited it few days ago, it's a shame that they stopped updating it since Sept or something. A proper gears compilation from WoG datamining would be awesome.
 
yeah it is a shame, but at the moment its a stay-away, and good thing i found this out because i went there yesterday, so i scanned my computer with 10 diff programs and im clean :)
 
Can anyone confirm about somepage.com please because I always go there? Thanks alot for the information.
 
All these trojans/hacks w/e is fucking annoying lately. GOd damn, just let us play our game.

SE should fucking change their policy. All they do is giving no support or shit support and lie to you ><.
 
Chiimister said:
All these trojans/hacks w/e is fucking annoying lately. GOd damn, just let us play our game.

SE should fucking change their policy. All they do is giving no support or shit support and lie to you ><.
Click to expand...

Agreed. Is it just me or do the English speaking staff not give a shit?
 
Some people need to get hacked so they leave the house. There someone had to fucking say it. You dont get hacked you get your life back.


PS. Person in my LS got hacked, and we are all very sad. :(
 
Chiimister said:
All these trojans/hacks w/e is fucking annoying lately. GOd damn, just let us play our game.

SE should fucking change their policy. All they do is giving no support or shit support and lie to you ><.
Click to expand...
QFT!!!!!!!!!!! this is getting out of hand.
 
Well, I dont have FFXI installed XD...
Our Virus scanner didnt say something... XD
 
i always thought somepage was full of adware/trojans i never check it...

i plan not to check alla for a while on my game comp thanks for the heads up

besides ffxiah are there other sites that have hacks that are known so far
 
So is it safe to assume now that if a site is tied into FFXI in any way shape or form, that it's a potential gateway for keyloggers? It's like 2003 all over again, the only info out there left will be the Brady guide.
 
Even though I'm on 360 I just did another virus scan(Trend Micro PC-Cillin) on my laptop to see what would come up. Now forgive me because I'm not savvy on terms and what file names do exactly what, but I had 14 infections and all the same.

All were data mining cookies tracking my information. A few were said to be coming from Tribalfusion.com which is a popup I've received many times from visiting somepage.com.

I checked my program files and deleted anything out of the ordinary and also noticed I had some Notepad files saved with what looked to be something of a keylogger file. It said over and over how "program started" and then random words that I don't understand (like I said, not savvy on the termonology XD).
 
You must log in or register to reply here.
Back
Top