Page 1 of 1

Thread appears to include malicious link

Posted: 29 Dec 2017, 17:54
by RickC
Apologies if this is the wrong area.

I've just read this thread: https://autohotkey.com/boards/viewtopic.php?f=5&t=42030 and MalwareBytes Premium indicates an attempt to access a malicious website (and blocks access). I get the same Malwarebytes warning if I refresh the page... so I'm confident it's just this one page.

Image

Hope this helps...

Re: Thread appears to include malicious link

Posted: 29 Dec 2017, 17:58
by gregster
Might be the link to some third-party macro recorder (not AHK based) on this page that is suspicious.

Re: Thread appears to include malicious link

Posted: 29 Dec 2017, 18:20
by RickC
gregster wrote:Might be the link to some third-party macro recorder (not AHK based) on this page that is suspicious.
The thread has only 2 embedded URLs and neither trigger Malwarebytes. I looked at the source of the page and I can't see what's triggering the warning.

Re: Thread appears to include malicious link

Posted: 29 Dec 2017, 18:47
by gregster
Actually, the picture seems to be the problem (though not even clickable).

It is hosted on u.teknik.io (mentioned in your program's warning) which might be or not be a domain where malicious software was/is hosted. See also malwarebytes forum: https://forums.malwarebytes.com/topic/2 ... s-hphosts/

Re: Thread appears to include malicious link

Posted: 30 Dec 2017, 02:09
by RickC
gregster wrote:Actually, the picture seems to be the problem (though not even clickable).

It is hosted on u.teknik.io (mentioned in your program's warning) which might be or not be a domain where malicious software was/is hosted. See also malwarebytes forum: https://forums.malwarebytes.com/topic/2 ... s-hphosts/
Your'e right. MBAM blocked the image on my PC so all I saw was the word 'image' instead. However, when I opened the thread on my iPad I could see the image.

Thank you for the link to the MBAM support site. Well spotted!

Re: Thread appears to include malicious link

Posted: 22 Nov 2018, 10:53
by Zero3K
The site is no longer marked as malicious by Malwarebytes.