If you recently recieved a strange PM.

basilmarket.com forums : Site talk | 15 posts archived

thread starter angramainyu Jul 13 2009 + PM | QUOTE | PERMALINK | REPORT

Do not click the link It should look something like the link in the screenshot below, courtesy of mskillaboy. http://img31.imageshack.us/i/weirdguym.jpg/ At any rate, the link opens up an iframe -- a webpage inside a webpage. That iframe is 0 by 0 pixels; it's totally invisible. It contains a script that may harm your computer or BasilMarket. According to Basil's resident security, the script sends PMs to random basilers so long as the tab is opened. The link is a bytehost link; a free hosting organization which allows anyone to post nearly anything. The source code for the website, for anyone familiar with HTML, is here : <html> <head> <title>VICTORY!</title> </head> <body> <center><font size="5"><b>PLEASE WAIT WHILE THE PAGE LOADS!</b></font><br/><br/> <font size="4">This will take between 10-15 seconds</font><br/><br/> Thanks for your patience!<br/></center> <iframe src="send1.php" width="0" height="0" scrolling="no" border="0" style="di splay:none;width:0px;height:0px;"></iframe>  <meta http-equiv="refresh" content="10;url=index.php" /> </body> </html>

Blacklisted 07/13/09 + PM | QUOTE | PERMALINK | REPORT

Thank you for the warning good sir.

secure 07/13/09 + PM | QUOTE | PERMALINK | REPORT

it logs your referrer and uses to send a PM by doing a submit(); on page load with a random username in the 'to' field.

imearth 07/13/09 + PM | QUOTE | PERMALINK | REPORT

Wait what is the link? Is it safe?

Blacklisted 07/13/09 + PM | QUOTE | PERMALINK | REPORT

imearth said: "Wait what is the link? Is it safe?" No.

Kyensho Jul 13 2009 + PM | QUOTE | PERMALINK | REPORT

imearth said: "Wait what is the link? Is it safe?" I'd suggest not clicking it. Edit : Wouldn't it be better to post this some where more visible then the site section?

secure 07/13/09 + PM | QUOTE | PERMALINK | REPORT

if you click, it'll make you send a PM to another random user, self propogating (if is enabled)

CrimsonSpider 07/13/09 + PM | QUOTE | PERMALINK | REPORT

imearth said: "Wait what is the link? Is it safe?" Probably not if the TS is telling us not to click it. Something malicious, I think.

imearth 07/13/09 + PM | QUOTE | PERMALINK | REPORT

I don't really get how its not safe to click it if its just imageshack ._.

angramainyu 07/13/09 + PM | QUOTE | PERMALINK | REPORT

secure said: "if you click, it'll make you send a PM to another random user, self propogating (if is enabled)" How is it getting BasilIDs?

Fahla Jul 13 2009 + PM | QUOTE | PERMALINK | REPORT

Kyensho said: " I'd suggest not clicking it. Edit : Wouldn't it be better to post this some where more visible then the site section?" It's the only place you can post this since it's a site issue. It would just be moved here anyway if it were anywhere else. @imearth It's the link that's IN the picture that he posted that you shouldn't click.

secure 07/13/09 + PM | QUOTE | PERMALINK | REPORT

angramainyu said: " How is it getting BasilIDs?" "random user" just refresh the forum list several times throughout the day, you'll get a couple hundred/thousand active basilids..

OxStarxO 07/13/09 + PM | QUOTE | PERMALINK | REPORT

Oh no I clicked it D:

CrimsonSpider 07/13/09 + PM | QUOTE | PERMALINK | REPORT

imearth said: "I don't really get how its not safe to click it if its just imageshack ._." ...I mean the link that the person in the PM gave. I'm sure you're well aware of that though.

angramainyu 07/13/09 + PM | QUOTE | PERMALINK | REPORT

imearth said: "I don't really get how its not safe to click it if its just imageshack ._." The link I posted is safe. It contains a screenshot; a picture of the malicious link sent to mskillaboy in a PM. I suggest you refrain from copying the link in the screenshot, however.