Site malware?

Following the site shut-down last week, every time I go to the site, the screen goes crazy and I get this error message:

.
.
.
.

Well, I would add an image of what I get on screen, but the Shrine WON’T let me add or attach an image. Following all of the rules, size, dimensions, etc. but no luck.

Anyway, there’s a weird screen that takes over the browser every time I open the Shrine. Mods should take a look at it. They can also email me and I will email the image that I can’t upload here.

Currently the only way to get rid of it, until you shut down your browser session, is to refresh the homepage.

Which is what appears to get rid of it. Until you open the webpage again.

Any fix for this on the horizon? It just seems annoying, not destructive – yet.

I had the exactly same problem, been avoiding FFS for a few days due that… but now it seems to work again. Phew!

Yeah, seems to be gone now.

Nope, still the same. Virus warning, happens twice every time you opening, or go back to, any page.

Following the site shut-down last week, every time I go to the site, the screen goes crazy and I get this error message:

This happens to me too when I try to sign in with Chrome. With Internet Explorer there is no problem.

Has anyone confirmed the problem has been cleaned up? Was FFShrine hacked?

Still happening, but now only once per page upload.
So progress?
Either that, or the second attack is now getting through. I don’t know.

It appears to be KPOT Stealer malware, which is pretty nasty if not removed from your computer and can lead to personal data being stolen and even ID fraud.

I saw the pop-up with the fake Chrome updater a few times so have kept away from the site for a few days.

I just tried the site now for the first time and didn’t see it this time. That said, I do have malwarebytes, cybersec, adblock and a host of other plugins.

I would think the site needs a serious security update, especially because it’s not yet HTTPS.

dR

For now just use uBlock Origin or something like that and block the jquery.su domain to be safe.

I’m using uBlock Origin but I can’t work out how to specifically block the jquery.su domain.

Open the uBlock Origin Dashboard, go to the My filters tab, and add the domain there.

That being said, I heard it might still occasionally slip by somehow regardless, so you might also want to go with NoScript on top of that just to be sure.

I reached out to Sarah and she is looking into it

This message?

Same for me today – it has returned! 🙁

Is there something I should do if I experienced this? How do I remove it? On a mac.

Is there something I should do if I experienced this? How do I remove it? On a mac.

Refresh the page, and it will disappear for a few days.

DO NOT install anything on your system.