Site Feedback Open forum for discussion of this site. Post your kudos or criticism so that we can continually improve service to the new MINI community.

Reported attack

Thread Tools
 
Search this Thread
 
Old Oct 9, 2010 | 09:54 PM
  #1  
JWA's Avatar
JWA
Thread Starter
|
2nd Gear
Joined: Aug 2009
Posts: 133
Likes: 3
NAM has been blacklisted for containing malware

Hey Guys,

As of this evening (10/9/10) NorthAmericanMotoring.com is being listed as containing malware and Firefox and Safari block access with the default security settings. This is the report on why it is being blocked: http://safebrowsing.clients.google.c...anmotoring.com

Looks like someone needs to do some house cleaning and get Google to re-evaluate the site.
 
Old Oct 10, 2010 | 03:16 AM
  #2  
MotorMouth's Avatar
MotorMouth
6th Gear
Joined: Sep 2004
Posts: 3,821
Likes: 1
From: Mililani,Hawaii
as of this post it is still blacklisted.
 
Old Oct 10, 2010 | 07:17 AM
  #3  
Motor On's Avatar
Motor On
6th Gear
iTrader: (1)
Joined: Oct 2005
Posts: 20,848
Likes: 15
Our tech support team has been working on this since last night, I will update you when I have more information.
 
Old Oct 10, 2010 | 07:30 AM
  #4  
daflake's Avatar
daflake
6th Gear
Joined: Sep 2005
Posts: 3,925
Likes: 2
From: Laurel MD
Yeah, I was pretty surprised to find this this morning.....

:(
 
Old Oct 10, 2010 | 09:19 AM
  #5  
Porthos's Avatar
Porthos
OVERDRIVE
iTrader: (8)
Joined: Feb 2009
Posts: 6,455
Likes: 14
From: None yours!
Reported attack

I am getting NAM is a reported malware attack everytime I select a page. Is anyone else getting this problem.
 
Old Oct 10, 2010 | 09:20 AM
  #6  
Oxybluecoop's Avatar
Oxybluecoop
6th Gear
15 Year Member
iTrader: (-1)
Joined: Oct 2007
Posts: 2,977
Likes: 5
From: Delaware
Yep
 
Old Oct 10, 2010 | 09:36 AM
  #7  
rhawth99's Avatar
rhawth99
6th Gear
Joined: Jan 2006
Posts: 1,694
Likes: 0
From: Central NJ
Yes, Firefox reports this as an attack site. Started today - didn't see this when I visited the site yesterday.
 
Old Oct 10, 2010 | 09:46 AM
  #8  
booktrout's Avatar
booktrout
3rd Gear
Joined: Sep 2009
Posts: 260
Likes: 0
 

Last edited by booktrout; Oct 10, 2010 at 02:25 PM.
Old Oct 10, 2010 | 09:51 AM
  #9  
Porthos's Avatar
Porthos
OVERDRIVE
iTrader: (8)
Joined: Feb 2009
Posts: 6,455
Likes: 14
From: None yours!
I am on my droid now so that I can go through the website with no problems. Bu is there a possibility of fixing this.
 
Old Oct 10, 2010 | 10:02 AM
  #10  
ran-o-matic's Avatar
ran-o-matic
4th Gear
Joined: Jul 2009
Posts: 378
Likes: 0
I get the same report from Chrome and any page link from google.
 
Old Oct 10, 2010 | 10:03 AM
  #11  
ran-o-matic's Avatar
ran-o-matic
4th Gear
Joined: Jul 2009
Posts: 378
Likes: 0
I bet something was in one of the ads as google crawled the site.
 
Old Oct 10, 2010 | 10:25 AM
  #12  
mbu's Avatar
mbu
4th Gear
Joined: Oct 2008
Posts: 548
Likes: 2
From: Colorado
Yes, I'm having problems too using Firefox! I had to go to IE to post this message.
 
Old Oct 10, 2010 | 10:27 AM
  #13  
Porthos's Avatar
Porthos
OVERDRIVE
iTrader: (8)
Joined: Feb 2009
Posts: 6,455
Likes: 14
From: None yours!
Just got an email com the moderation they are working on it.
 
Old Oct 10, 2010 | 10:33 AM
  #14  
iwashmycar's Avatar
iwashmycar
6th Gear
iTrader: (8)
Joined: Sep 2008
Posts: 3,313
Likes: 104
From: Columbus, Ohio
Yeah its in the "Site feedback" area.
 
Old Oct 10, 2010 | 11:25 AM
  #15  
ZippyNH's Avatar
ZippyNH
6th Gear
iTrader: (1)
Joined: Sep 2009
Posts: 12,605
Likes: 41
From: Southern NH
Still an issue...you would think they would make a statement about it...
I guess the legal department must ok the message....
Must mean there is something too it. This site does run a very old version of software with many exploits (highly customized from what I can tell with plugins I think, but in Internet age, still creaky).I guess someone found an unlatched one, and installed some nasty stuff.
Wonder if this has anything to do with the issues with the parrent company that now owns NAM?
 
Old Oct 10, 2010 | 11:58 AM
  #16  
JIMINNI's Avatar
JIMINNI
Banned
Joined: Nov 2006
Posts: 4,862
Likes: 3
From: Fresno Ca.
The safari on my iPhone is letting me on, not my firefox at home though.
 
Old Oct 10, 2010 | 02:43 PM
  #17  
Achilless's Avatar
Achilless
4th Gear
iTrader: (1)
Joined: Oct 2009
Posts: 447
Likes: 0
From: Utica, New York
https://www.northamericanmotoring.co...g-malware.html
^just another thread that you can follow
 
Old Oct 10, 2010 | 02:50 PM
  #18  
Motor On's Avatar
Motor On
6th Gear
iTrader: (1)
Joined: Oct 2005
Posts: 20,848
Likes: 15
If you're using Firefox you can go into your settings and shut off the error messages, as a temporary solution until everything gets sorted out with Google.
 
Old Oct 10, 2010 | 03:00 PM
  #19  
Motor On's Avatar
Motor On
6th Gear
iTrader: (1)
Joined: Oct 2005
Posts: 20,848
Likes: 15
Threads Merged. It's getting fixed, hopefully it will all be settled soon.
 
Old Oct 10, 2010 | 03:09 PM
  #20  
JWA's Avatar
JWA
Thread Starter
|
2nd Gear
Joined: Aug 2009
Posts: 133
Likes: 3
Originally Posted by Motor On
If you're using Firefox you can go into your settings and shut off the error messages, as a temporary solution until everything gets sorted out with Google.
Be careful with that suggestion. Google seems to be seeing legitimate malware here on the site somewhere, with the number and sources increasing since last night. Thus, simply turning off the warning still leaves people at risk.

Visiting from a platform that isn't vulnerable to most of the threats is the best idea. IOS devices like the iPhone or iPad, most mobile devices.
 
Old Oct 10, 2010 | 05:07 PM
  #21  
Agarwaen's Avatar
Agarwaen
5th Gear
iTrader: (2)
Joined: Mar 2010
Posts: 896
Likes: 2
From: Mountain Home, AR
Originally Posted by JWA
Be careful with that suggestion. Google seems to be seeing legitimate malware here on the site somewhere, with the number and sources increasing since last night. Thus, simply turning off the warning still leaves people at risk.

Visiting from a platform that isn't vulnerable to most of the threats is the best idea. IOS devices like the iPhone or iPad, most mobile devices.
Better yet, to protect yourself.

Turn off the warnings like suggested by MO, AND install the noscript addon of Firefox. Then only allow NAM.com and disallow any other sites to run scripts. This will shut down any chance of an attack.
 
Old Oct 10, 2010 | 08:02 PM
  #22  
Rossii's Avatar
Rossii
5th Gear
Joined: Mar 2003
Posts: 917
Likes: 1
From: SF Bay Area
This what I get

Safe Browsing
Diagnostic page for northamericanmotoring.com

What is the current listing status for northamericanmotoring.com?
Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 721 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-10-10, and the last time suspicious content was found on this site was on 2010-10-10.
Malicious software includes 3 exploit(s).

Malicious software is hosted on 6 domain(s), including 4safe.in/, overskka.co.cc/, isteemps.co.cc/.

3 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including crabbeyroad.com/, 4safe.in/, isteemps.co.cc/.


This site was hosted on 2 network(s) including AS13897 (CDC1), AS25973 (MZIMA).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, northamericanmotoring.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
 
Old Oct 10, 2010 | 09:17 PM
  #23  
mike.cal's Avatar
mike.cal
1st Gear
Joined: Sep 2010
Posts: 19
Likes: 0
Google detecting malware on NAM

whenever I visit NAM using google chrome, it puts up a warning page, linking to this page:

http://safebrowsing.clients.google.c...hrome&hl=en-US

It seems like NAM only server google ads, so i don't know why this is the case, but i just thought i'd post about it.
 
Old Oct 10, 2010 | 09:55 PM
  #24  
BBR52
1st Gear
Joined: Jun 2010
Posts: 11
Likes: 0
I've been getting the same warning since Saturday evening when trying to follow any google link to this site.
 
Old Oct 11, 2010 | 12:11 AM
  #25  
howsoonisnow1985's Avatar
howsoonisnow1985
6th Gear
iTrader: (26)
Joined: Jan 2007
Posts: 3,716
Likes: 1
From: Santa Cruz County Jail
Me too

Yep IE nor firefox will allow me on NAM only iPhone
Originally Posted by Rossii
This what I get

Safe Browsing
Diagnostic page for northamericanmotoring.com

What is the current listing status for northamericanmotoring.com?
Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 721 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-10-10, and the last time suspicious content was found on this site was on 2010-10-10.
Malicious software includes 3 exploit(s).

Malicious software is hosted on 6 domain(s), including 4safe.in/, overskka.co.cc/, isteemps.co.cc/.

3 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including crabbeyroad.com/, 4safe.in/, isteemps.co.cc/.


This site was hosted on 2 network(s) including AS13897 (CDC1), AS25973 (MZIMA).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, northamericanmotoring.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
 



All times are GMT -7. The time now is 12:33 AM.