Malware site behavior? Topic is solved

Talk about code development, features, specific bugs, enhancements, patches, and similar things.
Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.

This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.

Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
DevGuy

Malware site behavior?

Unread post by DevGuy » 2017-06-11, 19:43

If you go to http: // hamradiooutlet . com you get a malware popup that somehow takes over all of Pale Moon. You can't close that tab, select other tabs, or shut down the browser without using the Task Manager or risk clicking on the malware popup. So if you happen across one of these sites, and have dozens of tabs open, you lose all your tabs as you have to force close Pale Moon. I know Pale Moon doesn't "sandbox" tabs but wonder if that webpage is taking advantage of an exploit that can be corrected?

hackerman1
Lunatic
Lunatic
Posts: 385
Joined: 2013-12-19, 15:12
Location: Sweden

Re: Malware site behavior?

Unread post by hackerman1 » 2017-06-11, 20:17

Use the right URL... ;)
If you are looking for the company Hamradio Outlet, which is selling amateur radios, then the correct URL is: http://www.hamradio.com/
Administrator on Windows Server to Workstation
Moderator (and "undercover" Admin) on The Windows Club Forum

Security: EAM, Comodo Firewall and HIPS, WinPatrol+, HOSTS-file, UAC (max), Sandboxie, NoScript and ADBlock.

DevGuy

Re: Malware site behavior?

Unread post by DevGuy » 2017-06-11, 20:32

@hackerman1 I figured that out. But obviously mis-typing (or mis-remembering) URLs is a fairly common thing. The issue isn't how I got to that site, but how Pale Moon behaves once there. Opera and Vivaldi, for example, do not have to be force closed and you don't lose your other sessions. If this is something that can be fixed in Pale Moon it seems worth a look.

hackerman1
Lunatic
Lunatic
Posts: 385
Joined: 2013-12-19, 15:12
Location: Sweden

Re: Malware site behavior?

Unread post by hackerman1 » 2017-06-11, 20:46

Yes, it is.
I made the same mistake myself, last year...

I assume that you are allowing javascript in Pale Moon ?
I have no problems with Pale Moon when that URL is redirecting to another webbsite.
I am using NoScript, which blocks javascript...

So there already is a solution, don´t allow javascript everywhere... ;)
Administrator on Windows Server to Workstation
Moderator (and "undercover" Admin) on The Windows Club Forum

Security: EAM, Comodo Firewall and HIPS, WinPatrol+, HOSTS-file, UAC (max), Sandboxie, NoScript and ADBlock.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35587
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Malware site behavior?

Unread post by Moonchild » 2017-06-12, 10:39

What exactly does it do? I ask because Pale Moon does have a number of measures to prevent denial of service by malicious scripting.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

Locked