How to protect users of the mobile version of the site/forum from malicious banners/scripts?

M

Michael2012-09-09 10:58:04

Information Security

Michael, 2012-09-09 10:58:04

I am the administrator of one visited forum and now I want to implement a mobile version - in the discussion I received a number of warnings / complaints of the kind that a lot of worms / viruses crawl through mobile phones with fraudulent subscriptions to paid SMS.
Users often complain about banners that appear when viewing mobile versions of forums and websites. Banners lead to fake Opera updates and other methods of mobile fraud with sending paid SMS, etc.
For example, the topic is atvclub.ru, forum.atvclub.ru/showthread.php?t=59667&page=2 (sorry for the link, this is not my forum, just so as not to reprint here verbatim).
I didn’t come across this before, tell me where to look to read in order to instruct users and know that everything has been done for safety.
Forum on licensed vBulletin 4.1

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

E

Evgeny Borisov, 2012-09-09
@Agel_Nash

Are you sure that's all?
Check .htaccess for similar instructions
RewriteCond %{HTTP_USER_AGENT} (android|midp|j2me|symbian|series\ 60|symbos|windows\ mobile|windows\ ce|ppc|smartphone|blackberry|mtk|bada|windows\ phone) [NC] RewriteCond %{HTTP_USER_AGENT} !(accoona|ia_archiver|antabot|ask\ jeeves|baidu|dcpbot|eltaindexer|feedfetcher|gamespy|gigabot|googlebot|gsa-crawler|grub-client|gulper|slurp|mihalism|msnbot|worldindexer|ooyyo|pagebull|scooter|w3c_validator|jigsaw|webalta|yahoofeedseeker|yahoo!\ slurp|mmcrawler|yandexbot|yandeximages|yandexvideo|yandexmedia|yandexblogs|yandexaddurl|yandexfavicons|yandexdirect|yandexmetrika|yandexcatalog|yandexnews|yandeximageresizer) [NC]
Check all javascript that is loaded by your site. It is possible that the installation of the virus was carried out through the introduction of code into JS files or it was trite in the html code of the page <script type="text/javascript" src="http://example.com/xxxx.js"></script>
. It is also possible to install the code in php files, but here it is necessary to analyze the source codes.
In general, the algorithm for checking whether your site is infected is as follows:
- look at .htaccess
- look at what files are downloaded from the network when accessing the site
If everything is clean, then with a probability of 90% your site is clean. The remaining 10% fall on those who have the virus loading registered in php files.

A

Artem, 2012-09-09
@bartwell

So just do not place ads from this advertiser on the mobile version of the site. For example, register on wapstart and use only their ads on the mobile version.

D

Dmitry Spirin, 2012-09-10
@MipH

Do you want to use this solution?
www.tapatalk.com/