Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Malicious advertisement on cyberduck.io #4

Open
Almenon opened this issue Sep 1, 2023 · 1 comment
Open

Malicious advertisement on cyberduck.io #4

Almenon opened this issue Sep 1, 2023 · 1 comment
Assignees

Comments

@Almenon
Copy link

Almenon commented Sep 1, 2023

In cyberduck.io a advertisement appears that pretends to be the download button, but is not actually the download button. I would recommend reporting it to your advertisement provider or switching providers.

image

The download button links to [NOT SAFE TO CLICK] link

This link redirects to [NOT SAFE TO CLICK] link. Not sure what that link results in because I have javascript turned off, I just get a loading icon. It's doubtlessly not legitimate, whatever it is.

One thing that's odd is that it appears to be a google ad, but doesn't have the usual AdChoices icon and x icon.

As a sidenote, I would recommend configuring your security tab in Github: https://github.com/iterate-ch/cyberduck/security

@Almenon
Copy link
Author

Almenon commented Sep 1, 2023

Relevant html:

<ins class="adsbygoogle adsbygoogle-noablate" data-adsbygoogle-status="done" data-anchor-status="displayed" style="display: block; width: 100% !important; height: 129px !important; bottom: 0px; clear: none !important; float: none !important; left: 0px; margin: 0px !important; max-height: none !important; max-width: none !important; opacity: 1; overflow: visible !important; padding: 0px !important; position: fixed; right: auto !important; top: auto !important; vertical-align: baseline !important; visibility: visible !important; z-index: 2147483647; background: rgb(250, 250, 250) !important;" data-ad-status="filled" data-anchor-shown="true"><div class="grippy-host"></div><div id="aswift_3_host" tabindex="0" title="Advertisement" aria-label="Advertisement" style="border: none !important; height: 124px !important; width: 100% !important; margin: 0px !important; padding: 0px !important; position: relative !important; visibility: visible !important; background-color: transparent !important; display: inline-block !important; inset: auto !important; clear: none !important; float: none !important; max-height: none !important; max-width: none !important; opacity: 1 !important; overflow: visible !important; vertical-align: baseline !important; z-index: auto !important;"><iframe id="aswift_3" name="aswift_3" browsingtopics="true" style="width: 1005px !important; height: 124px !important; display: block; margin: 0px auto;" sandbox="allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts allow-top-navigation-by-user-activation" width="1005" height="124" frameborder="0" marginwidth="0" marginheight="0" vspace="0" hspace="0" allowtransparency="true" scrolling="no" allow="attribution-reporting" src="https://googleads.g.doubleclick.net/pagead/html/r20230830/r20110914/zrt_lookup.html#RS-1-&amp;adk=1812271801&amp;client=ca-pub-9176652804694766&amp;fa=1&amp;ifi=4&amp;uci=a!4?xpc=BzdUCN70Zz&amp;p=https%3A//cyberduck.io" data-google-container-id="a!4" data-google-query-id="COW1qOD7iYEDFb2h0QQd3oENSw" data-load-complete="true"></iframe></div></ins>

@dkocher dkocher transferred this issue from iterate-ch/cyberduck Sep 3, 2023
@dkocher dkocher changed the title [security] malicious advertisement on https://cyberduck.io [security] malicious advertisement on cyberduck.io Sep 8, 2023
@dkocher dkocher changed the title [security] malicious advertisement on cyberduck.io Malicious advertisement on cyberduck.io Sep 8, 2023
@dkocher dkocher self-assigned this Sep 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants