[ale] Older parent friendly desktop WM
Alex Carver
agcarver+ale at acarver.net
Fri Oct 3 19:04:31 EDT 2014
So a bit more information is coming to light. I'll also know more this
weekend when I talk to them and remote in again to check on things.
First, he received both credits on his account. So now he just needs to
monitor the account in case they sold off any data but he's got his
money back.
Second, I think he's suffering from HTML injection ads. He just visited
the keepass.info site for an update and told me that the ad for the very
company that scammed him was there on the page.
I visited the site myself and the only ad on the page (when I turn off
AdBlock) is from AdSense on the right side of the page. He's telling me
that there's a large banner at the bottom of the page taking up a third
to half the page. That's not what I see at all so I'm suspicious of the
injection. I'll need to remote in and review the source of the page and
compare it against the one I get. If the injection is occurring I need
to get to the bottom of it fast.
The ad apparently looks very official, almost like a dialog box hovering
low on the page. I need to get a screen capture of it plus the source
code. More forensics to do and I really don't have much time this
weekend to do it. Too much work to do writing a massive proposal that's
due on the 17th.
More information about the Ale
mailing list