Malware attacks Megs' site

[roushstage2]

Re: Malware attacks Megs' site

Actually 3M now owns Meguiar's.

That would be quite interesting, lol

[the_invisible]

Re: Malware attacks Megs' site

Cool! Lets hope the hackers are caught...

My company (as wel as any other companies that operate on the internet) has to deal with attacks ocassionally. It is simply a fact of life. A website being hacked is almost equivalent to a person receiving excessive spam mails, in the eyes of the constitution. Virtual crimes are extremely hard to solve and not many hackers actually get caught, let alone prosecuted.

And you know, nobody ever even reports hacking incidents to anybody. Who is there to report hacking incidents to? To the police? No, they don't handle cyber crimes. To the FBI? Nope, they'd tell you to get lost and tell you to upgrade the security of your website. Actually, I am pretty sure they'd ridicule, blame, and harass you for having an insecure website in the first place.

For small corporations or enties, if there's any incurred loss due to online hacking, it's the insurance companies that we have to deal with. Yes, authorities are [usually] notified to satisfy the insurance companies, but federal authorities couldn't be bothered with petty crimes that involve less than millions of dollars in damages.

For larger corporations, such as banks or publicly traded companies, authorities would serve in their best interest, because hacking of those companies could directly affect the "general public".

So, in a nutshell, no one is gonna get caught for hacking Meguiar's site. And besides, the hacking is probably done behind another proxy anyway. To catch a hacker requires forensic investigations (to decipher literally trillions of incoming and outgoing requests) and many search warrants (to gain access to various proxy servers both domestic and foreign), which could take months to perform and process. I don't think anybody's gonna get caught.

Anyway, there's so much for you to learn, noobhax0r

[noobhax0r]

Re: Malware attacks Megs' site

Here's Meguiar's press release regarding 3M:

http://www.meguiars.com/press/release_viewer.cfm?selected_ID=184

[noobhax0r]

Re: Malware attacks Megs' site

My company (as wel as any other companies that operate on the internet) has to deal with attacks ocassionally. It is simply a fact of life. A website being hacked is almost equivalent to a person receiving excessive spam mails, in the eyes of the constitution. Virtual crimes are extremely hard to solve and not many hackers actually get caught, let alone prosecuted.

And you know, nobody ever even reports hacking incidents to anybody. Who is there to report hacking incidents to? To the police? No, they don't handle cyber crimes. To the FBI? Nope, they'd tell you to get lost and tell you to upgrade the security of your website. Actually, I am pretty sure they'd ridicule, blame, and harass you for having an insecure website in the first place.

For small corporations or enties, if there's any incurred loss due to online hacking, it's the insurance companies that we have to deal with. Yes, authorities are [usually] notified to satisfy the insurance companies, but federal authorities couldn't be bothered with petty crimes that involve less than millions of dollars in damages.

For larger corporations, such as banks or publicly traded companies, authorities would serve in their best interest, because hacking of those companies could directly affect the "general public".

So, in a nutshell, no one is gonna get caught for hacking Meguiar's site. And besides, the hacking is probably done behind another proxy anyway. To catch a hacker requires forensic investigations (to decipher literally trillions of incoming and outgoing requests) and many search warrants (to gain access to various proxy servers both domestic and foreign), which could take months to perform and process. I don't think anybody's gonna get caught.

Anyway, there's so much for you to learn, noobhax0r

Yes you're right that there are always attacks going on as it is the _internet_. However its not entirely true that nobody reports hacking incidents. There are cyber crime units that exist for investigations. If nobody ever investigated, how would anybody even know about cyber crime? Or how would security ever be improved? As for dealing with insurance companies for this type of thing, do they actually investigate the incident themselves? Do they payout? How does that work? For investigating something like this, I dont think it would be impossible though yes it would require time and effort but its not exactly CSI. I would imagine a medium sized company like Meguiar's would have a competent team & infrastructure to at least analyze what happened & plug that security hole. Finally yes, there is an entire world to learn. Noone knows everything. No need to be elitist

[Peter.kelly]

Re: Malware attacks Megs' site

No probs here and I am a computer person (read occupation). Sometimes the number of links to other sites for car pic posting which google will follow can make problems,,,,,

[noobhax0r]

Re: Malware attacks Megs' site

No probs here and I am a computer person (read occupation). Sometimes the number of links to other sites for car pic posting which google will follow can make problems,,,,,

Meguiar's already fixed the issue

[akimel]

Re: Malware attacks Megs' site

I don't know if this is a new hack or whether a continuation of the previous one, but I'm getting the same warning message when I try to get to the estore products page: http://www.meguiars.com/estore/product_list.cfm.

Here's the safe browsing info.

[the_invisible]

Re: Malware attacks Megs' site

Yes you're right that there are always attacks going on as it is the _internet_. However its not entiresly true that nobody reports hacking incidents. There are cyber crime units that exist for investigations. If nobody ever investigated, how would anybody even know about cyber crime?

Hey, I am just playing with you. You have a provocative username just kidding.

The recent hack on Meguiars.com is almost considered a petty crime, kind of like downloading blu-ray movies through bit torrent. Such a hack is probably not even performed by a person, but by a bot that is constantly searching for poorly secured websites. Authorities rarely, if ever, spend any effort on this type of hack.


Akmiel, erase your cookies and try entering the site again.

[Michael Stoops]

Re: Malware attacks Megs' site

I don't know if this is a new hack or whether a continuation of the previous one, but I'm getting the same warning message when I try to get to the estore products page: http://www.meguiars.com/estore/product_list.cfm.

Here's the safe browsing info.

Thanks Al, we're looking into it.

[akimel]

Re: Malware attacks Megs' site

Akmiel, erase your cookies and try entering the site again.

I deleted both my cookies and my cache. The warning message still appears when I attempt to go to this page:

http://www.meguiars.com/estore/product_list.cfm