I caught Wowhead being used to spread infections *sigh*

[Tim]

I saw a message today about Wowhead spreading a trojan, so I loaded up Wowhead on my test machine and starting browsing around. Sure enough...

Personally it is a sad state how things have come along, whereas a fansite can simply pass blame onto their advertising methods for why things like this happen. Sites like these ultimately DO have control over what ads are shown on their page, however, they choose to go the route of revenue VS protection of their users, and the end result is basically captured in the below screenshot.

[Ualaa]

More reasons to run Firefox +Noscript +Adblock.

[Tim]

Originally Posted by Ualaa

More reasons to run Firefox +Noscript +Adblock.

I'm firmly against adblock because you are essentially stealing from websites by using that.

Does +Noscript block flash? That is how most of these trojans are being delivered (embedded into Flash, which can then trigger when to release the trojan, and to who. Ex, the Trojan could only trigger to people who browse the site who have recently browsed worldofwarcraft.com).

[Ualaa]

NoScript does block flash, at least until you add a website either permanently or temporarily.

With Adblock added to the mix you see an image on wowhead, which requests you whitelist them, as the site is supported primarily by advertisements. With NoScript alone, you cannot see the banner nor can you see the message requesting the site be whitelisted.

[EaTCarbS]

adblock + noscript =

[Tim]

Anybody else notice the condom is slightly larger than his thumb? Either he has a big thumb, or a really small....