JQuery hacked

nodesocket wrote: post #3

What exactly are we looking for? Only see a few failed to load JavaScript assets, and those could be from my Hotel wireless injecting their Ads. http://engine.adzerk.net/ados.js?_=1411579196670 and http://cloak.ovatn.net/adframe/cframe.js?id=1491

The page was temporarily replaced with a plain-text message explicitly stating they were hacked and that the hacker was looking for a job. The page has since been reverted.

Re: JQuery hacked

#7

Post by spacefight » Wed, Sep 24, 2014, 5:26 PM UTC

nodesocket wrote: post #3

What exactly are we looking for? Only see a few failed to load JavaScript assets, and those could be from my Hotel wireless injecting their Ads. http://engine.adzerk.net/ados.js?_=1411579196670 and http://cloak.ovatn.net/adframe/cframe.js?id=1491

Hotel wireless connections are sometimes considered harmful. Use a VPN connection of your choice (i.e. your employer, a trustworthy provider or else).

Re: JQuery hacked

#8

Post by Zancarius » Wed, Sep 24, 2014, 5:46 PM UTC

sp332 wrote: post #4

Why does this go to a documentation page? Anyway this was already discussed https://news.ycombinator.com/item?id=8359223

I don't think this is the same event as mentioned in that post (and in fact, the post has since been updated) as pointed out by ambiate [1] (below). The original discussion was related to a compromise supposedly detected by RiskIQ. This is something else entirely. To quote the link in that article:

"Update via Twitter: We have detected a new compromise of jquery.com and are taking action to mitigate the attack. Updates to follow. – September 24, 2014 at 12:20PM EDT"

[1] https://news.ycombinator.com/item?id=8362743

Re: JQuery hacked

#9

Post by haliphax » Wed, Sep 24, 2014, 5:47 PM UTC

Why do people do this rather than linking to a screenshot or something? By the time it comes up in my RSS news reader, it is almost always not in the same condition as when the link was posted.

Re: JQuery hacked

#10

Post by daviddede » Wed, Sep 24, 2014, 5:50 PM UTC

thirdtruck wrote: post #6

nodesocket wrote: post #3

What exactly are we looking for? Only see a few failed to load JavaScript assets, and those could be from my Hotel wireless injecting their Ads. http://engine.adzerk.net/ados.js?_=1411579196670 and http://cloak.ovatn.net/adframe/cframe.js?id=1491

The page was temporarily replaced with a plain-text message explicitly stating they were hacked and that the hacker was looking for a job. The page has since been reverted.

Do you have a screenshot by chance?