Update: Google’s given our site a clean bill of health, so you should no longer be getting any angry red warnings. Again, apologies for any trouble we may have caused you.
Earlier today, Google reported that the Shameless website was serving malware to our users. As a result, the StopBadware database has flagged the site as a potential attack vector, meaning Firefox and Google throw up angry warning messages before you’re allowed to visit the site.
Chances are very few people are reading this message right now, as the danger messages are still up. Yes, Shameless was indeed serving malware; the OpenX software we use to serve ads on the site (namely the banner at the top of the page and the small ads in the sidebar) had a remote vulnerability that could be exploited to inject arbitrary code. In normal-speak, this means hackers could exploit a security hole in the OpenX software to serve malware through our site.
We’ve taken down the ads for the time being, so the site should no longer be trying to infect your poor computer with bad juju. I sincerely hope no one suffered lasting effects from the attack, but if something on the Shameless site asked you to install any software and you said yes, then you will need to clean your computer. Spybot Search & Destroy and Lavasoft Ad-Aware are two widely used tools to get rid of malware; virus scanners such as Avast and Microsoft Security Essentials may also be useful.
My sincere apologies to anyone who was affected by our brief flirtation with malware distribution. Hopefully it will be the last time we have to deal with a problem like this.



Digg
one comment
As someone who removes malware for a living (yeah, really) I highly reccommend malware bytes...and after that has updated and run, spybot search and destroy. And while I know your website probably survives thru advertising, I using firefox's add on "ablock plus" and that greatly improves my browsing experience..not only by blocking out ads..but by blocking out ads that are supported by 3rd party websites that are not as secure as the website on which they advertise.
cheers.
Posted by vesper
July 3, 2010, 2:58 AM
Leave a comment
Our comment policy
Shameless prides itself on the diversity of opinions expressed by our writers, and we encourage and appreciate different points of view. Our intention at Shameless is to foster community and to maintain a safe and positive blogging environment; we do not consider it our duty to give a voice to anybody with an opinion.
Discussion on this site is moderated. We will delete comments that:
(We get to decide what's discriminatory, hateful, attacking, or inflammatory).
In some cases, we will cap off comments on a discussion when we feel they are spiralling out of control and fostering an unwelcoming space for bloggers and readers. Comments will be closed by the Web Editor, unless the post is by the Web Editor, in which case the Editor in Chief will close them.
If your comments repeatedly make the same point, they may be deleted. This also applies to comments made by multiple members of the same organization.
Your comments should be about the topic of the post, not its writer—although we certainly encourage praise for our writers, if you want to say something nice.