← Back to context Comment by LoganDark 7 hours ago The archive.today site is the one injecting the malware, not the site being archived. 13 comments LoganDark Reply mahboi 7 hours ago "It was discovered by a member of the mod team today that an article archived by archive.today had injected malware links into the archived article."Idk, maybe this is just a typo, but grammatically this is saying the article injected the links. k00shball 6 hours ago Go to https://archive.ph/jXv3A#selection-5079.208-5079.212 Click on "Filed on Tuesday" and it will redirect you to a site telling you to download something.(To be fair, that isn't the only redirect so you might need to click it a few times.) deepfriedrice 1 hour ago It immediately stands out that that link is to a /wp-content URL. AKA wordpress. AKA PHP. AKA very recently vulnerable (and perhaps still)...Whereas other links (e.g. the immediate next one to arxiv) seem unaffected. mahboi 5 hours ago Thanks, that's pretty much all I was looking for. Was able to reproduce but then started getting 429s. 6 replies → stordoff 2 hours ago [dead] stavros 1 hour ago I think they meant it as in "an article archived by archive.today had malware links injected into the archived article."
mahboi 7 hours ago "It was discovered by a member of the mod team today that an article archived by archive.today had injected malware links into the archived article."Idk, maybe this is just a typo, but grammatically this is saying the article injected the links. k00shball 6 hours ago Go to https://archive.ph/jXv3A#selection-5079.208-5079.212 Click on "Filed on Tuesday" and it will redirect you to a site telling you to download something.(To be fair, that isn't the only redirect so you might need to click it a few times.) deepfriedrice 1 hour ago It immediately stands out that that link is to a /wp-content URL. AKA wordpress. AKA PHP. AKA very recently vulnerable (and perhaps still)...Whereas other links (e.g. the immediate next one to arxiv) seem unaffected. mahboi 5 hours ago Thanks, that's pretty much all I was looking for. Was able to reproduce but then started getting 429s. 6 replies → stordoff 2 hours ago [dead] stavros 1 hour ago I think they meant it as in "an article archived by archive.today had malware links injected into the archived article."
k00shball 6 hours ago Go to https://archive.ph/jXv3A#selection-5079.208-5079.212 Click on "Filed on Tuesday" and it will redirect you to a site telling you to download something.(To be fair, that isn't the only redirect so you might need to click it a few times.) deepfriedrice 1 hour ago It immediately stands out that that link is to a /wp-content URL. AKA wordpress. AKA PHP. AKA very recently vulnerable (and perhaps still)...Whereas other links (e.g. the immediate next one to arxiv) seem unaffected. mahboi 5 hours ago Thanks, that's pretty much all I was looking for. Was able to reproduce but then started getting 429s. 6 replies → stordoff 2 hours ago [dead]
deepfriedrice 1 hour ago It immediately stands out that that link is to a /wp-content URL. AKA wordpress. AKA PHP. AKA very recently vulnerable (and perhaps still)...Whereas other links (e.g. the immediate next one to arxiv) seem unaffected.
mahboi 5 hours ago Thanks, that's pretty much all I was looking for. Was able to reproduce but then started getting 429s. 6 replies →
stavros 1 hour ago I think they meant it as in "an article archived by archive.today had malware links injected into the archived article."
"It was discovered by a member of the mod team today that an article archived by archive.today had injected malware links into the archived article."
Idk, maybe this is just a typo, but grammatically this is saying the article injected the links.
Go to https://archive.ph/jXv3A#selection-5079.208-5079.212 Click on "Filed on Tuesday" and it will redirect you to a site telling you to download something.
(To be fair, that isn't the only redirect so you might need to click it a few times.)
It immediately stands out that that link is to a /wp-content URL. AKA wordpress. AKA PHP. AKA very recently vulnerable (and perhaps still)...
Whereas other links (e.g. the immediate next one to arxiv) seem unaffected.
Thanks, that's pretty much all I was looking for. Was able to reproduce but then started getting 429s.
6 replies →
[dead]
I think they meant it as in "an article archived by archive.today had malware links injected into the archived article."