TBN being hacked?

[Pixguy]

A screen capture of the popup or ad including the url you are at would be helpful.

Usually these types of things sneak in through advertising codes (called fraudulent ads), not our actual site being hacked. There are systems that run on the ad networks to detect and remove them automatically. If it doesn't happen again that could be the case. Might have already been removed. If it persists well find it.

Didn't my screenshots show the url?
securenetguardian . top

 

[Muhammad]

Didn't my screenshots show the url?
securenetguardian . top

Yeah, that's obviously not on our site so I'm thinking maybe some fraudulent ad got a redirect injected to the banner code and then once on that other url you see the popup for McAfee.

If it happens again or you can replicate it let me know.

 

[BleedingOrange]

I,m a long ways from a computer expert. This is the only site were pictures load extremely slooooooow for me on my laptop. On all other sites I visit, they are instant. Could this somehow be related ?

 

[mikester]

Yeah, that's obviously not on our site so I'm thinking maybe some fraudulent ad got a redirect injected to the banner code and then once on that other url you see the popup for McAfee.

If it happens again or you can replicate it let me know.

Safari "privacy report"

Considering google is the number one source of drive by malware, spyware, spamware, scamware, spam ads I'm not surprised users are getting these "ads".

Google makes money from scammers ripping people off. Proceeds from crime.

 

[KennyG]

I got it on Firefox. One time thing.

 

[Muhammad]

I got it on Firefox. One time thing.

Yesterday or today?

 

[KennyG]

2 days ago.

 

[CliffordK]

I,m a long ways from a computer expert. This is the only site were pictures load extremely slooooooow for me on my laptop. On all other sites I visit, they are instant. Could this somehow be related ?

I've hit that on some pages. Generally internally hosted photos.

I like to chop my photos down to about 1000x1000 pixels, and set the JPG quality to 70%. And I can get my images down to perhaps around 300 kb without sacrificing quality.

TBN will host photos up to over 2 MB. If one thumbnails the photos, it is OK, but I prefer inline photos.

Many sites do post processing on uploaded images to shrink them to a reasonable size for the network.

 

[Pixguy]

It just happened again. I'm on this tablet with personal and business for over 6 hours a day. It has only happened on tbn. My wife who has the same tablet who doesn't come on here has not seen it at all.

 

[CliffordK]

I don't get very many TBN ads, and no TBN popups.

With NoScript, I have:

TractorByNet.com set to "Trusted"
Connatix.com set to "Default"
GoogleTagManager.com set to "Default"
pub.network set to "Default"

With "Default" likely being similar to "Untrusted", I.E. scripts blocked by default.

I do still get page header ads, and that is fine. I use this is in part to reduce tracking scripts, and as a front line antivirus.

Now, looking up the info posted by @Pixguy.

https://malwaretips.com/blogs/remove-win32hoax-renos-hx/

Remove Trojan.Fakealert.356 Pop-up Scam [Virus Removal]

The Trojan.Fakealert.356 pop-up is a push notification that uses fake alerts stating that your device is under attack or infected to trick you into clicking

malwaretips.com

Remove "Your Windows 10 Is Infected With 5 Viruses!" Pop-up Scam (Guide)

This guide teaches you how to remove "Your Windows 10 is infected with 5 viruses!" pop-ups for free by following easy step-by-step instructions.

malwaretips.com

This is undoubtedly a simple phishing/Trojan scam. Whatever you do, don't click on the boxes and let it install stuff on your computer. Close the windows, or perhaps close your browser.

 

[otlski]

I got it twice on my MacBook last night. Gave up and left TBN.

 

[oldrustysteel]

I received both of these McAfee screens while on TBN today. I could only hit upper tab in order to remove.


View attachment 853702
View attachment 853703

Same thing happened to me maybe 2 days ago. I narrowed it down to this site only, so I reluctantly posted about it asking if anyone else had this problem. After doing that, it stopped. BTW I had Mcaffee protection on my laptop and I deleted it. The same warning still popped up every time I got on this site.. Extremely annoying

 

[oldrustysteel]

Trying to replicate this. Is everybody who saw this using safari?

No Safari here. windows Edge

Edit: Thursday at 10:18 is when I posted about the issue.

 

[Muhammad]

I don't get very many TBN ads, and no TBN popups.

With NoScript, I have:

TractorByNet.com set to "Trusted"
Connatix.com set to "Default"
GoogleTagManager.com set to "Default"
pub.network set to "Default"

With "Default" likely being similar to "Untrusted", I.E. scripts blocked by default.

I do still get page header ads, and that is fine. I use this is in part to reduce tracking scripts, and as a front line antivirus.

Now, looking up the info posted by @Pixguy.

https://malwaretips.com/blogs/remove-win32hoax-renos-hx/

Remove Trojan.Fakealert.356 Pop-up Scam [Virus Removal]

The Trojan.Fakealert.356 pop-up is a push notification that uses fake alerts stating that your device is under attack or infected to trick you into clicking

malwaretips.com

Remove "Your Windows 10 Is Infected With 5 Viruses!" Pop-up Scam (Guide)

This guide teaches you how to remove "Your Windows 10 is infected with 5 viruses!" pop-ups for free by following easy step-by-step instructions.

malwaretips.com

This is undoubtedly a simple phishing/Trojan scam. Whatever you do, don't click on the boxes and let it install stuff on your computer. Close the windows, or perhaps close your browser.

If there was a malware script loading on our pages, you would see it in noscript.

The four that you mentioned are all legitimate, not malware.

 

[buckeyefarmer]

I’m getting Wordpress error trying to bring up tbn on DuckDuckGo browser. Makes no sense.

 

[Muhammad]

View attachment 854079I’m getting Wordpress error trying to bring up tbn on DuckDuckGo browser. Makes no sense.

There's an update running right now

 

[ultrarunner]

Me too…

 

[Alan46]

I just saw in my junk mail a TBN email for a thread that I follow, did not open!

 

[California]

Firefox / Win 7 / NoScript. Also a phone with Android 12.

I haven't seen any of those issues.