Dr. Orly Taitz, Esq.'s Website Infected Free Republic

Oh for Goodness Sake ^ | Aug 9, 2009 | Oh for Goodness Sake

[SvenMagnussen]

On the night of July 31, I first noticed this alert at the website of Dr. Orly Taitz, Esq.:

On that date, July 31, 2009:

What happened when Google visited this site?

Of the 8 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-07-31, and the last time suspicious content was found on this site was on 2009-07-31.

Malicious software includes 2 scripting exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 3 domain(s), including cybercrime-protection.cn/, mcafee-malware.com/, security-alerts.cn/.

1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including security-alerts.cn/.

[SvenMagnussen]

On August 4, a poster at Politijab analyzed the problem and confirmed a Chinese malware code was installed on Dr. Orly Taitz, Esq.’s website. What the code was doing was creating an iframe that pulled content from security-alerts.cn/cyber/in.cgi?4.

The poster explained:

It’s trying to run a shockwave flash movie that is 1pixel by 1 pixel in size. This is a well known attack vector to try and take advantage of a known flaw in flash that allows code to be run on your computer… These operations work by creating essentially disposable websites. They try to infect as many computers as possible before their address is flagged, then redirect to a new site.

[Artemis Webb]

It’s likely that the malware was not added with her knowledge or consent, or that of her web master.

[Travis McGee]

General info ping.

[DieHard the Hunter]

Interesting... thanks. Do “the usual” anti-spyware / anti-virus software packages detect these exploits?

Cheers
*DieHard*

[ScaniaBoy]

Does this affect Mac computers as well as PC’s?

Been running anti-virus program but not detected anything (as yet).

[cripplecreek]

Zone alarm and McAfee haven’t detected anything here.

[SvenMagnussen]

Oh for Goodness Sake wrote ... On August 4, a poster at Politijab analyzed the problem and confirmed a Chinese malware code was installed on Dr. Orly Taitz, Esq.’s website. What the code was doing was creating an iframe that pulled content from security-alerts.cn/cyber/in.cgi?4. The poster explained: It’s trying to run a shockwave flash movie that is 1pixel by 1 pixel in size. This is a well known attack vector to try and take advantage of a known flaw in flash that allows code to be run on your computer… These operations work by creating essentially disposable websites. They try to infect as many computers as possible before their address is flagged, then redirect to a new site. He emailed his findings to Dr. Orly Taitz, Esq., feeling it was the responsible thing to do, and Politijab posted a warning to its members.

[Fresh Wind]

OK, assuming that Google did find something nasty on the Taitz site, how did Google manage to make that warning message appear? Did Google infect the site too with their own code, or has Google infected Firefox (since IE supposedly didn’t show the warning)?

Google might be right about the infection, but I don’t trust Google’s motives.

[ScaniaBoy]

Thanks, but as far as I can see Zone Alarm and McAfee are PC programs.

[STONEWALLS]

“Google might be right about the infection, but I don’t trust Google’s motives.”

....me neither....any birth certificate site like this is dangerous to the Left...and Google is as Left as they come.

[Malsua]

There is a way to help reduce these threats.

http://www.opendns.com

You change your DNS settings to theirs, create an account and block .cn .ru .biz .info top level domains(I blocked the middle east and india too). By doing this you’ll eliminate 95% of all the malware domains. It’s 100% free and not a gimmick.

[NYIslander]

google and firefox web browsers both have frequently updated security features and are designed to alert users to sites potentially hosting malware.

IE doesn’t show the warning because, to put it bluntly, it’s an inferior product. So the posters here who were saying that “the site works fine on IE” were still encountering the same malware, but just weren’t using a browser equipped to warn them.

[Keith in Iowa]

>>>It’s likely that the malware was not added with her knowledge or consent, or that of her web master.

However, the Webmaster should be intelligent enough to cleanse the site of this crap NOW, and prevent it from happening in the future. If they (the webmaster) don’t - then they’re as worthless as an 0bama Hawaii birth certificate.

[Born Conservative]

Malware ping.

[CodeToad]

As we have discussed severals time on another site, the web is not annonymous nor secure.

[cripplecreek]

Just updated and tried with Firefox. No warnings there.

[Artemis Webb]

Well I don’t have to worry about it as I’m not a birther and I’m not going to the site. However what’s bad for FR is bad for me so I do hope they fix the problem.

[libravoter]

It’s likely that the malware was not added with her knowledge or consent, or that of her web master.

It's not hard to imagine that Orly has many many enemies.