BRITSIM

Classic British Flight Sim forum.
Support for Maltby/Piper FS models & other Classic British freeware.

Moderators: Guru's, The Ministry

Post Reply
Dev One
Vintage Pair
Vintage Pair
Posts: 2575
Joined: 10 Jul 2009, 08:33
Location: Chacombe about 2 mile east of M40 J11

BRITSIM

Post by Dev One »

Sorry Guys & Girls, but it looks as if Britsims been hacked yet again!
One gets redirected to an apps site!
I have been free of this until today & Dave Moly is also affected.
Have not heard from the Happy Otter for ages, so presumably he has got more fish (or Squirrels?) to fly!
Keith

Vancouver
Concorde
Concorde
Posts: 1470
Joined: 05 Apr 2008, 00:27
Location: CYXX

Re: BRITSIM

Post by Vancouver »

No problem for me I used http://www.britsim.com/ to get there.
Alex

Dev One
Vintage Pair
Vintage Pair
Posts: 2575
Joined: 10 Jul 2009, 08:33
Location: Chacombe about 2 mile east of M40 J11

Re: BRITSIM

Post by Dev One »

Alex,
One seems to be able to get there, but I have found (Dave also) that on the 3rd click, if trying to answer a forum question for example, one gets redirected & if you do get that it changes its address each time!
Keith

GHD
Vintage Pair
Vintage Pair
Posts: 2381
Joined: 17 Sep 2004, 14:04
Location: Harton Village, UK

Re: BRITSIM

Post by GHD »

It seems ok here:

Ah, I see what you mean. If one attempts to repy to a post, one is redirected to another site :-O
George

Image

Filonian
Red Arrows
Red Arrows
Posts: 6383
Joined: 27 Nov 2005, 08:08
Location: Gristhorpe, UK

Re: BRITSIM

Post by Filonian »

Found the same when I tried to register a vote on a download.


Graham
Image
The early bird gets the worm, but the second mouse gets the cheese.

Vancouver
Concorde
Concorde
Posts: 1470
Joined: 05 Apr 2008, 00:27
Location: CYXX

Re: BRITSIM

Post by Vancouver »

I don't get those symptoms at all, I've repeatedly tried too. FYI I use IE10 on W7 64. if that makes a difference.
Alex

User avatar
basys
VC10
VC10
Posts: 524
Joined: 06 Apr 2006, 12:28
Location: EGNL, Barrow-in-Furness, Cumbria, UK
Contact:

Re: BRITSIM

Post by basys »

Hi Folks

Britsim site has definitely been hacked.

There's a hidden DIV containing Cyrillic text and links.

Plus a couple of links to an Islamic site
which from the link looks like its also a victim of a hacker.

HTH
ATB
Paul
Image
I've never felt so frustrated....... died so frequently/spectacularly/or needlessly....... yet had so much fun, in a long time.
Flight's Landing Challenges - Earn your wings !

Dev One
Vintage Pair
Vintage Pair
Posts: 2575
Joined: 10 Jul 2009, 08:33
Location: Chacombe about 2 mile east of M40 J11

Re: BRITSIM

Post by Dev One »

Paul,
Thanks for that - it may be very useful for the Happy Otter when he can find time to attack the problem. We did have quite a few russian forum messages that were jibberish some time back that Rob cleared (& we hopefully deleted - but probably not from the root), but have not seen any islamic stuff.
Obviously the hole that Rob tried to plug is still leaky!
Unfortunately Dave M & myself are certainly not well enough acquainted with software manipulation to even try to modify anything & we seem to be missing poor old Leif's touch!
Regards
Keith

User avatar
basys
VC10
VC10
Posts: 524
Joined: 06 Apr 2006, 12:28
Location: EGNL, Barrow-in-Furness, Cumbria, UK
Contact:

Re: BRITSIM

Post by basys »

Hi Folks

Keith -
WRT your original malicious script infection -

Not all components had been removed from Britsim,
& guessing infection occurred in two seperate events.



Looks like the Islamic site was the payload vector.

The content of the file on their website had since been removed,
but if at any time is reinstated
your visitors will be subjected to its effects.



The calling code is still present in your templates,
(guessing in php for header & footer, plus at least ).

IIRC there may also be regeneration code,
that checks for & reinstates removed elements,
including a php file, which generates a browser specific js.



HTH
ATB
Paul
Image
I've never felt so frustrated....... died so frequently/spectacularly/or needlessly....... yet had so much fun, in a long time.
Flight's Landing Challenges - Earn your wings !

Dev One
Vintage Pair
Vintage Pair
Posts: 2575
Joined: 10 Jul 2009, 08:33
Location: Chacombe about 2 mile east of M40 J11

Re: BRITSIM

Post by Dev One »

Thanks for the added info Paul, but its all Greek to me. Just hope Rob passes by & can use your info.
Regards
Keith

Post Reply