Go Back  FlyerTalk Forums > Support&Services > Technical Support and Feedback
Reload this Page >

Web Attack: Angler Exploit Kit Website 6

Community
Wiki Posts
Search

Web Attack: Angler Exploit Kit Website 6

Thread Tools
 
Search this Thread
 
Old Jan 11, 2016, 6:23 pm
  #1  
Original Poster
 
Join Date: Apr 2007
Location: South Coast NSW, Australia
Programs: UA and SQ; Hilton, Fairmont, Marriott, Rydges Priority
Posts: 290
Web Attack: Angler Exploit Kit Website 6

Am getting warnings from Norton about this on these UA forum pages today.
grapegrower is offline  
Old Jan 11, 2016, 6:32 pm
  #2  
 
Join Date: Mar 2012
Programs: Mileage Plus 1K; Marriott Platinum; Hilton Gold
Posts: 6,355
Can somebody please translate this warning from Tech-Speak?
transportprof is offline  
Old Jan 11, 2016, 6:49 pm
  #3  
 
Join Date: Sep 2008
Location: SF Bay Area
Programs: None - previously UA
Posts: 4,864
https://blogs.sophos.com/2015/07/21/...r-exploit-kit/
escapefromphl is online now  
Old Jan 11, 2016, 6:54 pm
  #4  
 
Join Date: Mar 2012
Programs: Mileage Plus 1K; Marriott Platinum; Hilton Gold
Posts: 6,355
Originally Posted by escapefromphl
So does this mean that the FT web pages have been compromised?
transportprof is offline  
Old Jan 11, 2016, 7:33 pm
  #5  
 
Join Date: Jan 2013
Location: BOS
Programs: Hyatt Discoverist, Marriott/SPG/Hilton Gold, PreCheck + Clear
Posts: 2,306
Originally Posted by transportprof
So does this mean that the FT web pages have been compromised?
I believe it's possible. I reported an ad-related Flash security issue to the IB admins on the official board a week ago, and they dismissed my concerns.
RandomBaritone is offline  
Old Jan 11, 2016, 7:35 pm
  #6  
 
Join Date: Mar 2012
Programs: Mileage Plus 1K; Marriott Platinum; Hilton Gold
Posts: 6,355
Originally Posted by RandomBaritone
I believe it's possible. I reported an ad-related Flash security issue to the IB admins on the official board a week ago, and they dismissed my concerns.
So what should we do/not do to avoid risk of getting infected?
transportprof is offline  
Old Jan 11, 2016, 7:41 pm
  #7  
 
Join Date: Sep 2008
Location: SF Bay Area
Programs: None - previously UA
Posts: 4,864
Originally Posted by transportprof
So what should we do/not do to avoid risk of getting infected?
Make sure you're using the latest versions of browser and Flash.
escapefromphl is online now  
Old Jan 11, 2016, 8:37 pm
  #8  
 
Join Date: Aug 2008
Location: DCA, IAD (not BWI if I can help it)
Programs: UA 1MM 1K, Marriott Gold, Hyatt Explorist, status-free on AA, AS, B6, DL, WN, Amtrak, etc.
Posts: 1,481
Originally Posted by escapefromphl
Make sure you're using the latest versions of browser and Flash.
Yes to updating your browser, no to updating Adobe Flash--uninstall it. Flash exposes your computer to too many attacks without delivering any serious utility. If Flash were an airline, the FAA would have revoked its operating certificate; instead, it's dying of irrelevance because it's shut off from the mobile Web.

This indictment of Flash by Brian Krebs is worth reading.
DCA writer is offline  
Old Jan 12, 2016, 7:32 am
  #9  
 
Join Date: Jan 2013
Location: BOS
Programs: Hyatt Discoverist, Marriott/SPG/Hilton Gold, PreCheck + Clear
Posts: 2,306
Originally Posted by DCA writer
Yes to updating your browser, no to updating Adobe Flash--uninstall it. Flash exposes your computer to too many attacks without delivering any serious utility. If Flash were an airline, the FAA would have revoked its operating certificate; instead, it's dying of irrelevance because it's shut off from the mobile Web.
Generally I concur, though in my case I just chose to use a site-by-site Flash blocker. My day job is in Internet video, and a significant number of video sites aren't completely converted to HTML5.

Last edited by IBobi; Jan 12, 2016 at 7:16 pm Reason: admin edit
RandomBaritone is offline  
Old Jan 12, 2016, 7:17 pm
  #10  
No longer with Internet Brands
 
Join Date: Mar 2011
Location: Los Angeles, CA
Programs: DL DM 1.6MM, Marriott LT Plat
Posts: 5,343
I will ping tech about this. I doubt there has been any level of security breach.

Paul
IBobi is offline  


Contact Us - Manage Preferences - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.