Blogwalking good technique to improve the visitor

Blogwalking good technique to improve the visitor - (iklangoogle = window.iklangoogle || []). Push ({}); (iklangoogle = window.iklangoogle || []). Push ({}); Blog walking is one of the blog activity the easiest to do, blog walking can be regarded as a medium for the relationship between fellow bloggers, engineering blog walking

EU cookie law and fake Chrome extensions

When a website is serving up malware to unsuspecting visitors, it's often not too hard to find the culprit. In some cases however, it takes a bit more digging. When visiting a (not named on request) specific website, you're presented with the following message:

Your browser contains MALWARE. You have to install Chrome Malware Removal tool

After some digging on the site, nothing was suspicious at first sight. However... It did have a EU cookie law pop-up/consent:

The script behind it is as follows:









... Which contains:








Both scripts contain the warning message and a redirect to the Google Chrome store:

lang = 'en';
var msg = 'Your browser contains MALWARE. You have to install Chrome Malware Removal tool.';
if (lang == 'es') msg = "Su navegador contiene malware. Usted tiene que instalar la herramienta de eliminación de malware Chrome.";
if (lang == 'it') msg = "Il tuo browser contiene malware. È necessario installare strumento di rimozione malware Chrome.";
if (lang == 'fr') msg = "Votre navigateur contient MALWARE. Vous devez installer l'outil de suppression de logiciels malveillants Chrome.";
if (lang == 'pt') msg = "Seu navegador contém malware. Você tem que instalar o Ferramenta de remoção Chrome Malware.";
if (lang == 'de') msg = "Ihr Browser enthält MALWARE. Sie müssen Chrome Malware Removal Tool zu installieren.";
if (lang == 'ru') msg = "Ваш браузер содержит вредоносный код. Вы должны установить расширение для блокировки вредоносного кода.";
if (lang == 'gr') msg = "Το πρόγραμμα περιήγησής σας περιέχει κακόβουλο λογισμικό. Θα πρέπει να εγκαταστήσετε το Chrome Malware εργαλείο αφαίρεσης.";

You can find both scripts on Pastebin here and here.

Chrome Malware Removal Tool

At time of writing, it has over 22,000 users. You can find the malicious extension here.

UPDATE 27/07: the malicious extension has now been removed from the Chrome store.

To remove an extension from Chrome:

It is not clear whether the site offering the cookie consent script is hacked, or is in on the ploy.

You can find indicators (for what it's worth) as always on the AlienVault OTX.



Conclusion

Stay clear from scripts offered by 3rd party EU cookie consent websites and rather create your own pop-up. A trustworthy site to create this for example is cookie-script.

As always when managing a website, keep your CMS (if any) updated as well as any plugins that may be running.

You can find more tips on how to prevent, find (and remove) malicious scripts on your website here.

How to Make a Blog For Mobile SEO Friendly and more

How to Make a Blog For Mobile SEO Friendly and more - (iklangoogle = window.iklangoogle || []). Push ({}); (iklangoogle = window.iklangoogle || []). Push ({}); How to Make a Blog For Mobile Friendly and SEO - After the latest algorithms of search engine google mobilegeddon officially launched on 21april 2015, then to deal with

Tips to Overcome Content on Google AdSense is not Adequate

Tips to Overcome Content on Google AdSense is not Adequate - (iklangoogle = window.iklangoogle || []). Push ({}); (iklangoogle = window.iklangoogle || []). Push ({}); Overcome Content is not Adequate on Google AdSense - Many of the bloggers who try to join google adsense publisher, but until now they have not been successful

How To Unlock Facebook For Forgotten Password, ID or Email

How To Unlock Facebook For Forgotten Password, ID or Email - (iklangoogle = window.iklangoogle || []). Push ({}); (iklangoogle = window.iklangoogle || []). Push ({}); Not a few people who could not access the facebook page his because you forgot your password or password even email , perhaps to a facebook page which is