TWCenter forum infected with malware!!!

[Bröthër Gíg Hul Sundín]

Heads up, just today I noticed that there's a malicious script on TWCenter forums. It's only on individual boards, and runs as soon as your pc loads the account avatars, it's linked to the images.
Didn't notice it until today, and while I don't go there that much, I think it's pretty recent.

[Insaniac]

What does it do? How’d you discover this?

[Warriordude]

I for some reason haven't been able to log in at TWC for months, even changed Log in name and password IDK. Maybe I was banned and didn't know it LOL.

[Bröthër Gíg Hul Sundín]

Originally posted by Warriordude:

I for some reason haven't been able to log in at TWC for months, even changed Log in name and password IDK. Maybe I was banned and didn't know it LOL.

I'd say it's more like the site isn't safe anymore. Could be they just got some new person to look after the code and/or the site, and this person updated the forum's code to include this script. After all, most malware, ransomware, doxxing, whatever, is done with the intent of some sort of profit. So it's most likely the guys running TWC don't even know about this.

[Bröthër Gíg Hul Sundín]

Originally posted by Steven Seagal:

What does it do? How’d you discover this?

I have a little personalised utility which constantly scans everything my browser does, it has a pretty big library of known stuff, and even better ability to automatically detect new, potentially harmful stuff. I wasn't looking at the code myself, this utility detected it on its own, isolated and severed the connection, and went on DEFCON basically. It wasn't just one script, they were actually 5 separate ones working in unison and trying to infect my pc all at once the second the page loaded.

[Insaniac]

Are you sure this isn't just a false positive?

[Bröthër Gíg Hul Sundín]

Originally posted by Insaniac:

Are you sure this isn't just a false positive?

This isn't a finding made by a cheap antivirus.

[Insaniac]

Well it’s not like an expensive antivirus is any better.

[Bröthër Gíg Hul Sundín]

Originally posted by Insaniac:

Well it’s not like an expensive antivirus is any better.

It was not detected by an antivirus.

[Bröthër Gíg Hul Sundín]

Originally posted by Insaniac:

Well it’s not like an expensive antivirus is any better.

No worries if you wanna keep using the site. Just giving a heads up. If people want to ignore that, or straight up try to discredit or challenge me, that's fine. It's your PC, not mine.

[Insaniac]

You can edit a comment and add on to it to avoid double replying to someone.

[Uncle Karl]

are viruses even real??? ive never really used anti virus stuff for the last 20+years and havnt caught anything

[Insaniac]

Originally posted by Charlie Shovels:

are viruses even real??? ive never really used anti virus stuff for the last 20+years and havnt caught anything

In my experience, unless you’re on some supremely sketchy site, clicking links that tell you you’re the 1,000,000,000th visitor and that you won a free iPhone but the iPhone has a virus on it and you need to call a, “Windows help expert” in Bangladesh, you’ll be fine.

[ageust]

Originally posted by Dag:

Originally posted by Insaniac:

Are you sure this isn't just a false positive?

This isn't a finding made by a cheap antivirus.

you think your homebrew garbage is less likely to have a false positive than professional antivirus?

lol.

[Seosamh Ó Biden]

Very nice heads up, OP. Maybe you'd like to give us some concrete data to back up your findings, eh?

[Insaniac]

Originally posted by ageust:

Originally posted by Dag:

This isn't a finding made by a cheap antivirus.

you think your homebrew garbage is less likely to have a false positive than professional antivirus?

lol.

Well it’s not like the professional stuff is any good. But I’d like to know more about these malicious scripts or whatever. You mean to tell me that nobody else on the most popular TW site has noticed this or reported it or suffered from it? Do you know what it does? Can you maybe confirm it with another piece of software? This just strikes me as the kind of alarmism I remember from another game in which the anticheat would regularly get flagged as a virus and people would flip out over it.