THIS IS A STATIC MIRROR OF USERSCRIPTS.ORG - LOGINS DO NOT WORK

Spam and malware

in Userscripts.org discussion
Subscribe to Spam and malware 3530 posts, 606 voices



Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic
Empty topic

 
Erik Lundmark Scriptwright
FirefoxX11

shoesus24 posted a review here: https://userscripts-mirror.org/reviews/46134

 
Daem0nX Scriptwright
FirefoxMacintosh

https://userscripts-mirror.org/users/442265 All of their scripts have the same source code to auto add facebook info and are using the name/descriptions of other authors scripts.

Same as above https://userscripts-mirror.org/users/516272

Same as above https://userscripts-mirror.org/users/522088

 
404 Not Found Scriptwright
FirefoxWindows

These two scripts are malicious and appear to be connected in some way:

https://userscripts-mirror.org/scripts/show/170127
https://userscripts-mirror.org/scripts/show/171360

I haven't personally fallen victim, but I was made aware of people who are currently having these scripts attached automatically to Tumblr posts in the following way:

<script src=”https://userscripts-mirror.org/scripts/source/170127.user.js” type=”text/javascript”></script>

<script src=”https://userscripts-mirror.org/scripts/source/171360.user.js” type=”text/javascript”></script>

Both scripts are being injected to the html of the posts of those infected. I do not know at the moment what either script actually does.

Edit: Based on the previous versions of the former script, it appears that it's being used to get people to like pages/comments on Facebook, as well as other Facebook related actions, though the newest version is significantly different, so I can't say for sure that's what it's still doing.

Edit 2: Okay, this third script appears to be involved as well: https://userscripts-mirror.org/scripts/show/170392
It's a copy of this script but with a malicious eval included at the top. That script was the only one present on the computer of the user who was experiencing these issues. The eval appears to be used to download and execute the aforementioned script 170127.

Edit 3: ALL of these scripts appear to be malicious: https://userscripts-mirror.org/users/520580/scripts
Luckily, a quick peruse of some of them makes it seem that they all reference 170127, so there shouldn't be many more copies of the first two scripts being used.

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic
Empty topic
Empty topic

 
reek Scriptwright
FirefoxWindows

Hi,

spammers
https://userscripts-mirror.org/users/530887
https://userscripts-mirror.org/users/529428

 
Steve_Graham User
FirefoxX11

As '404' says above, https://userscripts-mirror.org/scripts/review/170127 is a spam generator. I found another which chains it: https://userscripts-mirror.org/scripts/show/161136

 
IngerAlHaosului User
FirefoxWindows

All the scripts from this user have misleading title and use your facebook account to subscribe to various sites

https://userscripts-mirror.org/users/talibecp
https://userscripts-mirror.org/users/522088
https://userscripts-mirror.org/users/516272

 
Aldebaran06 Scriptwright
ieWindows

Hello,

all the reviews of this user are spam
https://userscripts-mirror.org/users/529916/reviews

Thank you for your help

 
Martin Jessen Scriptwright
ChromeWindows

This user is posting fake facebook scripts that subscribe to various sites and is participating in reviewing similar scripts as 5 star https://userscripts-mirror.org/users/talibecp Please delete the user, the scripts they made, and the reviews they have made.

 
Jefferson Scher Scriptwright
FirefoxWindows

Empty topic


Empty topic
Empty topic

 
mvh User
ChromeWindows

more malware disguised as facebook scripts:
https://userscripts-mirror.org/scripts/show/157990
https://userscripts-mirror.org/users/extremeaxe

 
Dick Holman User
FirefoxX11

User: mkmalls21 https://userscripts-mirror.org/users/529916/reviews

All shoespam.

 
slow! Scriptwright
FirefoxX11

More facebook scams. Three "users" I've noticed so far are duplicating well known script names and placing tricky code in the duplicate scripts. The names are:

lynn daniel https://userscripts-mirror.org/users/522088
Liza jack https://userscripts-mirror.org/users/516272
Jack Powel https://userscripts-mirror.org/users/442265
Lee Ming https://userscripts-mirror.org/users/522449

These duplicate scripts do what looks like trickery with cookies and "friending" using XMLHttpRequest to facebook.

 
田生 Scriptwright
FirefoxWindows

https://userscripts-mirror.org/users/532668/reviews
Spam reviews.

 
Phil Cazz Scriptwright
FirefoxWindows

Spam reviews
https://userscripts-mirror.org/users/532538

 
Phil Cazz Scriptwright
FirefoxWindows

Malware:

A copy of mine with malware added

https://userscripts-mirror.org/scripts/show/155364

 
HanFox Scriptwright
FirefoxWindows

Spam reviews: https://userscripts-mirror.org/users/533128/reviews