Attention! I was hit by a virus (on the site)!

edited August 2017 in Custom Card Discussion
I really hate to create any paranoia, but this is important. Just a moment ago I was hit by a virus attack while using MTG Cardsmith. While my PC is okay, I just wanted to see if anyone else has gotten this, and if there's anything the site mods can do about it.

image

Note: This got triggered by me uploading an image.

Comments

  • @Tommia
    Did you access this website prior to uploading the image?

    @Corwinnn
    Your aid would also be helpful.
  • edited August 2017
    I was on the site for about 10 minutes prior, and have used it to make cards since without further troubles.

    Also, I used it yesterday.

    Lastly, here's the URL of the attacking site, with / replaced with ~

    http:~~server1.clicksmightfindme.com~?a=AZ&pagex=13&s1=OzwDxn_C3OtTMbKH-XfhofxF-1diGllkyvJ_7hRDKrZ-eHYPM10S-aCLduDx5FIEz4--PaTltR6ITUH96eDTPQ%2C%2C&os=Windows&browser=Chrome&isp=Comcast%20Cable%20Communications%20inc.&ip=76.100.220.38
  • edited August 2017
    @Tommia
    Please break the link for security sake.

    Edit: Thank you for doing so.
  • I replaced the / with ~. Didn't think to do that, sorry!
  • Thanks, just making sure.
  • Yeah... don't want to be responsible for the maulings of any poor computers with weak or no antivirus
  • Aww man that's scary @Tommia!
  • @mtgcardsmith will want to take a look at this as well.
  • Something similar happened around a year ago when I uploaded an actually appropriate piece of angel art. A big pop-up window appeared declaring that I had downloaded the horrible 'Tapsnake' virus, and it pressured me to click the button to purge my computer of the virus. Fortunately, I declined.
  • If there is a specific url that is repeatedly throwing this script please send it directly in a message. Otherwise I recommend checking/removing any installed browser plugins and your computer for malware.
    We have Cloudflare (https://www.cloudflare.com/security/) in place to prevent and deny any XSS attacks that might cause something like this.
    If you need to check your local computer, we recommend using https://www.malwarebytes.com/ free utility.
This discussion has been closed.