|
Re: Malwarebytes blocking progettosnaps
04/10/20 01:03 AM
|
|
|
> I didn't understand Vas Craab's speech on progettoemma.net... I have never been aware > of what he says (but maybe I'm misinformed).
Sorry, I was tired and said the wrong site – it was emulab.it that was serving malware. Something/someone attacked the Wordpress installations on the site and made them serve malware, but only to known vulnerable clients. If you connected with Safari or Konqueror browser it would not serve the malware for example. Probably designed to stop scanners from detecting the malware as easily. Remember when all the blogs on mamedev.emulab.it had to be rebuilt? That was because of the malware infestation.
MAWS was also compromised.
I’m not saying your site is compromised, just saying that one shouldn’t jump to the conclusion that it’s a false positive. You should probably check for malware with a server-side scan as well.
|
|