Team-BHP > Shifting gears > Gadgets, Computers & Software


Reply
  Search this Thread
9,353 views
Old 28th August 2018, 18:05   #31
Team-BHP Support
 
Rehaan's Avatar
 
Join Date: Feb 2004
Location: Bombay
Posts: 24,019
Thanked: 33,985 Times
Re: Virus problems/spyware problems! post here!

Quote:
Originally Posted by roamer012 View Post
I find the issue crops up on specific networks and devices.
Okay, this could be two things:

1) Your ISP messing around (as others have posted)

2) DNS Poisoning/hijacking. Basically your router or modem has been compromised, and the DNS server IPs have been changed to spammy servers that will sometimes open the site you want, and other times open an ad page.

I've seen both of these things happen first hand. Rather unbelieveable in case #1. More info later...

Quote:
Originally Posted by roamer012 View Post
However the pop up is usually restricted to Team BHP and few other websites.
This might be because Team-BHP allows http & httpS -- while most other sites force httpS. We'll be doing that soon.

POSSIBLE SOLUTIONS:

1) Browse Team-BHP on httpS only (or better yet, use an extension like 'httpS everywhere') that should help.

2) Block cabalten in Chrome - thanks to Siva Kumar D
Go to chrome://settings > Content Settings > Javascript - Manage Exceptions > Add [*.]cobalten.com and select Block
3) Check that your DNS server IPs on your modem & router are legitimate (Google DNS or OpenDNS are best)

4) Get another ISP. There are many good options these days.


Quote:
Originally Posted by i_see View Post
It seems BSNL is injecting adds for additional revenue
Wouldn't be a first... and even Airtel was responsible for doing the same at one point.

Quote:
Originally Posted by samaspire View Post
Can't we do anything about it? Complain to somebody?
Here's what I did for MTNL, and I'm not sure what effect it had, but it eventually stopped!

Shady Business: Airtel & MTNL injecting advertisements / js into websites you visit!

Last edited by Rehaan : 28th August 2018 at 18:45.
Rehaan is offline  
Old 28th August 2018, 18:24   #32
BHPian
 
Join Date: Sep 2014
Location: Jalandhar
Posts: 270
Thanked: 382 Times
Re: Virus problems/spyware problems! post here!

Quote:
Originally Posted by Rehaan View Post
Okay, this could be two things:

2) DNS Poisoning/hijacking. Basically your router or modem has been compromised, and the DNS server IPs have been changed to spammy servers that will sometimes open the site you want, and other times open an ad page.

This might be because Team-BHP allows http & httpS -- while most other sites force httpS. We'll be doing that soon.

SOLUTIONS:

1) Browse Team-BHP on httpS only (or better yet, use an extension like 'httpS everywhere') that should help.

2) Block cabalten - thanks to Siva Kumar D
If using chrome go to chrome://settings > Content Settings > Javascript Manage Exceptions > Add [*.]cobalten.com and select Block
3) Check that your DNS server IPs on your modem & router are legitimate (Google DNS or OpenDNS are best)

4) Get another ISP. There are many good options these days.
Thanks a lot for your response Rehaan. Will definitely try java script exception technique (on Windows Laptop and Mac) and get back here. However i haven't seen option for java settings or chrome extensions (for Https everywhere) on iOS (Since Chrome for iOS is still Safari at heart, I know i am oversimplifying a bit however would be happy to be enlightened on the matter if i am wrong).
As for DNS - Already using Google DNS servers (BSNL wifi forces you to use or else several sites do not open), Open DNS resulted in slower speeds while browsing however Google DNS does comes with its costs (Read Privacy).
As for changing ISP, do not have choice in the matter because at office its corporate decision (Plus i do not use it much anyways) and for home since i am living in a flat, wiring (Fiber Routing) is pre-done by builder and at the moment BSNL is the only ISP.
roamer012 is online now  
Old 1st November 2019, 14:16   #33
BHPian
 
Join Date: Jun 2019
Location: Bengaluru
Posts: 610
Thanked: 1,679 Times
Re: Virus problems/spyware problems! post here!

One more reason to avoid clicking links:

Quote:
WhatsApp recently confirmed that a spyware was being used by Israel based company NSO Group to spy on government officials, journalists, activists, lawyers, and various countries globally, including India. The confirmation about the use of Pegasus spyware came earlier this week after WhatsApp sued NSO Group, which had long been suspected in the WhatsApp cyberattack that happened earlier this year. Reportedly WhatsApp has warned several Indian users who are expected to be targets of the illegal snooping spyware.
https://www.news18.com/amp/news/tech...l-2369893.html

Last edited by SideView : 1st November 2019 at 14:17. Reason: Adding info
SideView is offline  
Reply

Most Viewed
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Copyright ©2000 - 2024, Team-BHP.com
Proudly powered by E2E Networks