clicknupload.co

[ReyKenobi]

Pop up ads start getting loaded as you click thru the download buttons, and there is also an attempt to download a suspect file before the actual files downloads. My security software stopped the attempts but its better if they are blocked at browser level.

Code: Select all

https://clicknupload.co/cp8e6h2v9m85

[intense]

fixed for uBO
https://github.com/uBlockOrigin/uAssets ... d1367f6592

[ReyKenobi]

Thanks. Now they have started loading a JS that my security software recognizes as a malicious application : JS/Adware.Subprop.U

Example: Same link as above.

[llacb47]

I can't reproduce, are you on latest filters? What is the domain of this malicious JS?

[ReyKenobi]

Yes, using the latest filters.

Here is the log from my security software. (semi-colon delimited)

Code: Select all

Time;Scanner;Object type;Object;Detection;Action;Information;Hash;First seen here

20-06-2020 01:03:54;JavaScript scanner;file;https://clicknupload.co/1kdrmleoamd1;JS/Adware.Subprop.U application;blocked;Event occurred during an attempt to access the web by the application: C:\Program Files\Mozilla Firefox\firefox.exe (8577B7F6EDE53B5390BDA8C6E5159EF326E8F722).;A28DA156DB0A7CC11071C50EECA65E9FFAB72825;

20-06-2020 01:04:03;HTTP filter;file;https://clicknupload.co/1kdrmleoamd1;JS/Adware.Subprop.U application;connection terminated;Event occurred during an attempt to access the web by the application: C:\Program Files\Mozilla Firefox\firefox.exe (8577B7F6EDE53B5390BDA8C6E5159EF326E8F722).;A241DAD20B8CD469D6F513DFDA42B6FE8A5B1F80;

[fanboy]

Force an update, would recommend avoiding downloading from those popups.