- Dec 18, 2018
- 189
- 382
Yeah, I'm aware of these kind of hijacks and misdirects. However, they are also nothing new, in fact every thread should be full of reports that a file contains a threat if it's just that since many file hosts are rather shady and dangerous to use without noscript and an adblock.It's not just possible. I've verified it myself. I have the waterfox fork, noscript and ublock origin. I always get the .rar or .zip on the first try with gofile. I get NoScript XSS warnings. Guess what XSS is?You must be registered to see the links
On my chrome, it's virgin. Only installed for programs that use it as a dependency. If I open the same gofile link in chrome, it attempts to download the MSI installer instead of the zip/rar. If I open a private tab, I'll get offered a MSI installer or an EXE installer.
This is gofile allowing their ad providers to run code on their site. Said code directs you to a downloader file to a virus-attached version of the files.
Or, to ask it the other way around: Why haven't the same people that don't have an adblock + noscript running complained the previous 10+ releases? I don't think that these kinds of attacks are uncommon.