Site Feedback Open forum for discussion of this site. Post your kudos or criticism so that we can continually improve service to the new MINI community.

Reported attack

Thread Tools
 
Search this Thread
 
  #1  
Old 10-09-2010, 09:54 PM
JWA's Avatar
JWA
JWA is offline
2nd Gear
Thread Starter
Join Date: Aug 2009
Posts: 133
Likes: 0
Received 3 Likes on 2 Posts
NAM has been blacklisted for containing malware

Hey Guys,

As of this evening (10/9/10) NorthAmericanMotoring.com is being listed as containing malware and Firefox and Safari block access with the default security settings. This is the report on why it is being blocked: http://safebrowsing.clients.google.c...anmotoring.com

Looks like someone needs to do some house cleaning and get Google to re-evaluate the site.
 
  #2  
Old 10-10-2010, 03:16 AM
MotorMouth's Avatar
MotorMouth
MotorMouth is offline
6th Gear
Join Date: Sep 2004
Location: Mililani,Hawaii
Posts: 3,821
Likes: 0
Received 1 Like on 1 Post
as of this post it is still blacklisted.
 
  #3  
Old 10-10-2010, 07:17 AM
Motor On's Avatar
Motor On
Motor On is offline
6th Gear
iTrader: (1)
Join Date: Oct 2005
Posts: 20,848
Likes: 0
Received 14 Likes on 10 Posts
Our tech support team has been working on this since last night, I will update you when I have more information.
 
  #4  
Old 10-10-2010, 07:30 AM
daflake's Avatar
daflake
daflake is offline
6th Gear
Join Date: Sep 2005
Location: Laurel MD
Posts: 3,925
Likes: 0
Received 2 Likes on 2 Posts
Yeah, I was pretty surprised to find this this morning.....

:(
 
  #5  
Old 10-10-2010, 09:19 AM
Porthos's Avatar
Porthos
Porthos is offline
OVERDRIVE
iTrader: (8)
Join Date: Feb 2009
Location: None yours!
Posts: 6,455
Received 13 Likes on 11 Posts
Reported attack

I am getting NAM is a reported malware attack everytime I select a page. Is anyone else getting this problem.
 
  #6  
Old 10-10-2010, 09:20 AM
Oxybluecoop's Avatar
Oxybluecoop
Oxybluecoop is offline
6th Gear
iTrader: (-1)
Join Date: Oct 2007
Location: Washington D.C.
Posts: 2,976
Likes: 0
Received 4 Likes on 4 Posts
Yep
 
  #7  
Old 10-10-2010, 09:36 AM
rhawth99's Avatar
rhawth99
rhawth99 is offline
6th Gear
Join Date: Jan 2006
Location: Central NJ
Posts: 1,694
Likes: 0
Received 0 Likes on 0 Posts
Yes, Firefox reports this as an attack site. Started today - didn't see this when I visited the site yesterday.
 
  #8  
Old 10-10-2010, 09:46 AM
booktrout's Avatar
booktrout
booktrout is offline
3rd Gear
Join Date: Sep 2009
Posts: 260
Likes: 0
Received 0 Likes on 0 Posts
 

Last edited by booktrout; 10-10-2010 at 02:25 PM.
  #9  
Old 10-10-2010, 09:51 AM
Porthos's Avatar
Porthos
Porthos is offline
OVERDRIVE
iTrader: (8)
Join Date: Feb 2009
Location: None yours!
Posts: 6,455
Received 13 Likes on 11 Posts
I am on my droid now so that I can go through the website with no problems. Bu is there a possibility of fixing this.
 
  #10  
Old 10-10-2010, 10:02 AM
ran-o-matic's Avatar
ran-o-matic
ran-o-matic is offline
4th Gear
Join Date: Jul 2009
Posts: 378
Likes: 0
Received 0 Likes on 0 Posts
I get the same report from Chrome and any page link from google.
 
  #11  
Old 10-10-2010, 10:03 AM
ran-o-matic's Avatar
ran-o-matic
ran-o-matic is offline
4th Gear
Join Date: Jul 2009
Posts: 378
Likes: 0
Received 0 Likes on 0 Posts
I bet something was in one of the ads as google crawled the site.
 
  #12  
Old 10-10-2010, 10:25 AM
mbu's Avatar
mbu
mbu is offline
4th Gear
Join Date: Oct 2008
Location: Colorado
Posts: 548
Likes: 0
Received 2 Likes on 2 Posts
Yes, I'm having problems too using Firefox! I had to go to IE to post this message.
 
  #13  
Old 10-10-2010, 10:27 AM
Porthos's Avatar
Porthos
Porthos is offline
OVERDRIVE
iTrader: (8)
Join Date: Feb 2009
Location: None yours!
Posts: 6,455
Received 13 Likes on 11 Posts
Just got an email com the moderation they are working on it.
 
  #14  
Old 10-10-2010, 10:33 AM
iwashmycar's Avatar
iwashmycar
iwashmycar is offline
6th Gear
iTrader: (8)
Join Date: Sep 2008
Location: Columbus, Ohio
Posts: 3,313
Received 102 Likes on 92 Posts
Yeah its in the "Site feedback" area.
 
  #15  
Old 10-10-2010, 11:25 AM
ZippyNH's Avatar
ZippyNH
ZippyNH is offline
6th Gear
iTrader: (1)
Join Date: Sep 2009
Location: Southern NH
Posts: 12,605
Likes: 0
Received 34 Likes on 34 Posts
Still an issue...you would think they would make a statement about it...
I guess the legal department must ok the message....
Must mean there is something too it. This site does run a very old version of software with many exploits (highly customized from what I can tell with plugins I think, but in Internet age, still creaky).I guess someone found an unlatched one, and installed some nasty stuff.
Wonder if this has anything to do with the issues with the parrent company that now owns NAM?
 
  #16  
Old 10-10-2010, 11:58 AM
JIMINNI's Avatar
JIMINNI
JIMINNI is offline
Banned
Join Date: Nov 2006
Location: Fresno Ca.
Posts: 4,862
Likes: 0
Received 3 Likes on 3 Posts
The safari on my iPhone is letting me on, not my firefox at home though.
 
  #17  
Old 10-10-2010, 02:43 PM
Achilless's Avatar
Achilless
Achilless is offline
4th Gear
iTrader: (1)
Join Date: Oct 2009
Location: Utica, New York
Posts: 447
Likes: 0
Received 0 Likes on 0 Posts
https://www.northamericanmotoring.co...g-malware.html
^just another thread that you can follow
 
  #18  
Old 10-10-2010, 02:50 PM
Motor On's Avatar
Motor On
Motor On is offline
6th Gear
iTrader: (1)
Join Date: Oct 2005
Posts: 20,848
Likes: 0
Received 14 Likes on 10 Posts
If you're using Firefox you can go into your settings and shut off the error messages, as a temporary solution until everything gets sorted out with Google.
 
  #19  
Old 10-10-2010, 03:00 PM
Motor On's Avatar
Motor On
Motor On is offline
6th Gear
iTrader: (1)
Join Date: Oct 2005
Posts: 20,848
Likes: 0
Received 14 Likes on 10 Posts
Threads Merged. It's getting fixed, hopefully it will all be settled soon.
 
  #20  
Old 10-10-2010, 03:09 PM
JWA's Avatar
JWA
JWA is offline
2nd Gear
Thread Starter
Join Date: Aug 2009
Posts: 133
Likes: 0
Received 3 Likes on 2 Posts
Originally Posted by Motor On
If you're using Firefox you can go into your settings and shut off the error messages, as a temporary solution until everything gets sorted out with Google.
Be careful with that suggestion. Google seems to be seeing legitimate malware here on the site somewhere, with the number and sources increasing since last night. Thus, simply turning off the warning still leaves people at risk.

Visiting from a platform that isn't vulnerable to most of the threats is the best idea. IOS devices like the iPhone or iPad, most mobile devices.
 
  #21  
Old 10-10-2010, 05:07 PM
Agarwaen's Avatar
Agarwaen
Agarwaen is offline
5th Gear
iTrader: (2)
Join Date: Mar 2010
Location: Mountain Home, AR
Posts: 896
Likes: 0
Received 2 Likes on 1 Post
Originally Posted by JWA
Be careful with that suggestion. Google seems to be seeing legitimate malware here on the site somewhere, with the number and sources increasing since last night. Thus, simply turning off the warning still leaves people at risk.

Visiting from a platform that isn't vulnerable to most of the threats is the best idea. IOS devices like the iPhone or iPad, most mobile devices.
Better yet, to protect yourself.

Turn off the warnings like suggested by MO, AND install the noscript addon of Firefox. Then only allow NAM.com and disallow any other sites to run scripts. This will shut down any chance of an attack.
 
  #22  
Old 10-10-2010, 08:02 PM
Rossii's Avatar
Rossii
Rossii is offline
5th Gear
Join Date: Mar 2003
Location: SF Bay Area
Posts: 917
Likes: 0
Received 1 Like on 1 Post
This what I get

Safe Browsing
Diagnostic page for northamericanmotoring.com

What is the current listing status for northamericanmotoring.com?
Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 721 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-10-10, and the last time suspicious content was found on this site was on 2010-10-10.
Malicious software includes 3 exploit(s).

Malicious software is hosted on 6 domain(s), including 4safe.in/, overskka.co.cc/, isteemps.co.cc/.

3 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including crabbeyroad.com/, 4safe.in/, isteemps.co.cc/.


This site was hosted on 2 network(s) including AS13897 (CDC1), AS25973 (MZIMA).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, northamericanmotoring.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
 
  #23  
Old 10-10-2010, 09:17 PM
mike.cal's Avatar
mike.cal
mike.cal is offline
1st Gear
Join Date: Sep 2010
Posts: 19
Likes: 0
Received 0 Likes on 0 Posts
Google detecting malware on NAM

whenever I visit NAM using google chrome, it puts up a warning page, linking to this page:

http://safebrowsing.clients.google.c...hrome&hl=en-US

It seems like NAM only server google ads, so i don't know why this is the case, but i just thought i'd post about it.
 
  #24  
Old 10-10-2010, 09:55 PM
BBR52
BBR52 is offline
1st Gear
Join Date: Jun 2010
Posts: 11
Likes: 0
Received 0 Likes on 0 Posts
I've been getting the same warning since Saturday evening when trying to follow any google link to this site.
 
  #25  
Old 10-11-2010, 12:11 AM
howsoonisnow1985's Avatar
howsoonisnow1985
howsoonisnow1985 is offline
6th Gear
iTrader: (26)
Join Date: Jan 2007
Location: Santa Cruz County Jail
Posts: 3,716
Likes: 0
Received 0 Likes on 0 Posts
Me too

Yep IE nor firefox will allow me on NAM only iPhone
Originally Posted by Rossii
This what I get

Safe Browsing
Diagnostic page for northamericanmotoring.com

What is the current listing status for northamericanmotoring.com?
Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 721 pages we tested on the site over the past 90 days, 9 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-10-10, and the last time suspicious content was found on this site was on 2010-10-10.
Malicious software includes 3 exploit(s).

Malicious software is hosted on 6 domain(s), including 4safe.in/, overskka.co.cc/, isteemps.co.cc/.

3 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including crabbeyroad.com/, 4safe.in/, isteemps.co.cc/.


This site was hosted on 2 network(s) including AS13897 (CDC1), AS25973 (MZIMA).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, northamericanmotoring.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
 


Quick Reply: Reported attack



All times are GMT -7. The time now is 07:23 AM.