newsharecounts.com

[ketchupvine]

URL(s) where the issue occurs

Code: Select all

https://newsharecounts.s3-us-west-2.amazonaws.com/nsc.js

Describe the issue
New block needed.
Issue: Malicious redirection javascript on mobile device.
On a mobile device (or desktop with a mobile user agent), a website infected with (includes this) javascript file will be impacted when they press the back button. Their browser redirects to another domain serving ads/malware/etc.

Notes
Some websites are using an abandoned twitter count javascript file, which was re-registered by someone else and now serving malicious javascript.
More details: https://blog.sucuri.net/2018/10/malicio ... unter.html

[smed79]

Before posting read rules (always provide example sites where the issue occurs and don't post clickable link)

https://github.com/uBlockOrigin/uAssets ... -430825503

[ketchupvine]

Examples:

Code: Select all

https://byrdnick.com/
http://www.fushionmag.com/
https://ibankcoin.com/
https://www.nexthardware.com/
https://www.onepagecrm.com/
https://www.carbase.my/
https://www.marklogic.com/
https://www.marieforleo.com/
https://klientboost.com/