Anyone out there play Bill Gant's Gunmaster?

[Cdnwolf]

Originally Posted by mikeo80

Targan,

I just went to the WarFlail's web site. My Anti Virus program went NUTS as IE tried to open the site. Any Ideas? Thoughts?

The Kalestia site worked fine.

Just thought you would want to know.

My $0.02

Mike

Same thing here...

[cavtroop]

Originally Posted by Cdnwolf

Same thing here...

The site IS infected. Source: I do information security for a living

After a short period of time, it attempts to redirect to a malicious site at "biezebeize.be"

I would not visit the warflail site, and Kato should probably remove the URL from this thread until it gets cleared up.

If anyone knows the author and wants to contact him, this is the bad part of the page: <div align="left"><a name="top"></a> </div><!--74ed9f--><script type="text/javascript" language="javascript" >

it contains an obfuscated javascript (dunno what it does exactly, but it can't be good).

EDIT: after some more research, that malicious javascript redirects users to the infamous Blackhole Exploit Kit: http://labs.sucuri.net/db/malware/ma...lackhole2?v403

You need to avoid that Warflail site at all costs until it's cleaned up.

[Targan]

Originally Posted by cavtroop

If anyone knows the author and wants to contact him...

Originally Posted by Targan

I'm proud to say that Bill Gant's been my friend for nearly 25 years and I was in the original play testing group for Gunmaster.

I'll talk to him ASAP.

[kato13]

Originally Posted by cavtroop

The site IS infected. Source: I do information security for a living

After a short period of time, it attempts to redirect to a malicious site at "biezebeize.be"

I would not visit the warflail site, and Kato should probably remove the URL from this thread until it gets cleared up.

If anyone knows the author and wants to contact him, this is the bad part of the page: <div align="left"><a name="top"></a> </div><!--74ed9f--><script type="text/javascript" language="javascript" >

it contains an obfuscated javascript (dunno what it does exactly, but it can't be good).

EDIT: after some more research, that malicious javascript redirects users to the infamous Blackhole Exploit Kit: http://labs.sucuri.net/db/malware/ma...lackhole2?v403

You need to avoid that Warflail site at all costs until it's cleaned up.

I agree that obfuscated code is weird. While the page tests clean on 5 different webbased tests (Norton, MCAfee, Google, etc) it is VERY suspicious. I am going to modify the link so the user needs to make a conscious choice to visit the site. I never like removing information, but if the clicker makes an informed choice to see the information it is in their hands.

[Targan]

Bill Gant has investigated overnight and found that in the last week or two someone has thoroughly infected the WarFlail site. He's taking the whole thing offline for the time being and it's likely the site will never be active again. I feel terrible but there's no point having an infected site remaining active. It saddens me as the site's been running for more than a decade I think.

[kato13]

That stinks. Cleaning a site is a colossal pain. Since I am the goto guy for my circle of friends for all things web I have cleaned up about a half a dozen sites. You are right usually throwing the whole thing out and starting from scratch is the easiest thing to do.

Since it looked like the site had a lot of stuff they were giving away, might I suggest using a file locker site, or even generating a torrent if the owner is willing to do so.

Torrents can be useful and totally legal for this kind of stuff if the owner is willing to share.

Getting back to the hack. I will never understand the full on black hat hackers. I will admit to a lot of "grey" stuff in my past, but rendering sites useless using an automated insertion program (little skill or innovation required) for marginal returns makes zero sense to me. Some people just want to watch the world burn I guess.

[cavtroop]

Originally Posted by Targan

Bill Gant has investigated overnight and found that in the last week or two someone has thoroughly infected the WarFlail site. He's taking the whole thing offline for the time being and it's likely the site will never be active again. I feel terrible but there's no point having an infected site remaining active. It saddens me as the site's been running for more than a decade I think.

Wow, that sucks He should investigate putting the material up on a Google Pages (or Sites, or whatever they call it) - that way he doesn't have to worry much about security or cpanel exploits etc etc, and the data stays online Though transferring all that info could be a PITA

[Cdnwolf]

Ummm some of the articles I found on Scribd.

[Michael Lewis]

This sucks! I guess I'll have to find another system.