Ghacks.net website delivering malware via fake browser update messages

[nicolaasjan]

I didn't get a redirect here, but at some point the site went down and now the latest posts are gone:

I don't visit the site that much any more, because the comment database is broken for a long time now (old unrelated comments appearing above the new ones).

 

[Jonny Quest]

I was a bit let down that there wasn't even a peep from F-Secure that I have installed on another PC. I just have its browser protection enabled and uBlock, so there was nothing to conflict with it as far as I know.

Is part of the malware, the image that doesn't display in the left corner of the install Chrome update page? When I opened it in a new link, I got the 2nd image information.

 

[brambedkar59]

Looks like they fixed it. Bitdefender and Malwarebytes both are detecting nothing now.

Edit: On VT detections dropped from 36 to 31 now.

Edit2: And back to 36 detections now.

 

[SeriousHoax]

Exact same infection on another site where the user was protected by Avast:

Win64:Evo-gen[Trj] Trojan Horse? Updating Tempest Browser Blocked by Avast

Win64:Evo-gen[Trj] Trojan Horse? Updating Tempest Browser Blocked by Avast

forum.avast.com

 

[nicolaasjan]

Ah, newer articles are appearing again on the frontpage.

[Edit]
And they are gone again...

 

[Jonny Quest]

Now that's what you call a real-world test of our AV's and browser extensions protection. Thank you, ghacks

 

[nickstar1]

Go malwarebytes great to see!

 

[oldschool]

I guess I missed all the fun. When I nooped the site to µBO Easy Mode I got a full-screen cookie notice. With hard mode the site is clean.

 

[nicolaasjan]

Notification of security issue - gHacks Tech News

Earlier today, we noticed a security issue on the site that showed a malicious intermediary page to visitors. This page asked visitors to update their browser to continue viewing the content.

There may have been different messages, depending on the web browser used. Firefox users, for instance, may have seen a “you need to update your browser to view the content” notification and an “update Firefox” button on the page.

We reacted quickly to the security issue and have resolved it. The investigation is still ongoing and we are still in the process of validating the site’s databases and content.

We would like to ask anyone who interacted with the malicious content to scan their systems with up to date antivirus software. Some options include Bitdefender Antivirus Free, Avast Free Antivirus or the built-in Microsoft Defender on Windows.

We will share additional information on the issue once we have completed the investigation.

 

[CyberTech]

Notification of security issue - gHacks Tech News

They should've added ''Credit goes to @roger_m From MalwareTips we thanked him for what he did! plus Ghacks Award"

 

[TairikuOkami]

And then websites (in general) complain about users using adblockers while nobody want's to be responsible for the booked malvertising...

There are ads on ghacks? Anyway, the webpage would by be blocked by TLD or NextDNS as of now.