trojan horse detected on chugger pump web site

My computer has Avast antivirus running. Just a few minutes ago I went to the Chugger pump site (chuggerpump.com) and avast sounded an alarm. It said it detected and blocked a trojan horse. Any time I navigated anywhere else on the site avast repeatedly reported the pages a malicious.

Anyone else having this happen? I wanted to contact the owner but didn't want to stay on the site any longer to get his contact info. Don't wabt to make things sound bad for Chugger but wanted to warn others without virus protection if there really is a danger.

There is something there. I went to the chuggerpumps page, and after a few seconds, it automatically went through a few reloads to some kind of scam advertising page.

I did a little debugging, and it appears that someone go into the site and inserted some obfuscated malicious code at the bottom of one of the JS files the page loads. (/js/cufon.js).

Don't visit their site for a bit, as it definitely appears to have been exploited.

The virus is still there as of today, found by ESET antivirus.

Too bad he's too busy trying to bash March Pumps to fix it

People have to realize that they need to spend money to protect their sites. Third party security vendors are REQUIRED for audit and penetration testing.

stamandster said:

People have to realize that they need to spend money to protect their sites. Third party security vendors are REQUIRED for audit and penetration testing.

Click to expand...

Exactly!

stamandster said:

People have to realize that they need to spend money to protect their sites. Third party security vendors are REQUIRED for audit and penetration testing.

Click to expand...

Ironically, the site has a "McAfee tested" logo on it.

If they accept credit cards they are required by their agreements with credit card companies to follow PCI (PCI DSS) standards. It's designed to protect the "company" against lawsuits from consumer information theft. If you don't there are big fines associated with it.

This is a security breach and could possibly lead to compromised account holder information. I guess that Mcaffee secure badge at the bottom of the page means diddly.

bdjohns1 said:

Ironically, the site has a "McAfee tested" logo on it.

Click to expand...

Yeah and when your password is ChuggerPumpRock! it's moot. lol

stamandster said:

If they accept credit cards they are required by their agreements with credit card companies to follow PCI (PCI DSS) standards. It's designed to protect the "company" against lawsuits from consumer information theft. If you don't there are big fines associated with it.

This is a security breach and could possibly lead to compromised account holder information. I guess that Mcaffee secure badge at the bottom of the page means diddly.

Click to expand...

A lot of times the PCI compliancy is a joke. Just a form to fill out that you "certify" you are doing things within spec. If you do have a breach you are then marked as a level 1 and it makes it far more difficult to be re-certified.

So a Trojan Horse? Let me guess... out pops a March Pump...

Drum roll..........
Lemme guess your here all week long...... !
;0

does this vendor participate on HBT? maybe someone should PM him...

jbsengineer said:

A lot of times the PCI compliancy is a joke. Just a form to fill out that you "certify" you are doing things within spec. If you do have a breach you are then marked as a level 1 and it makes it far more difficult to be re-certified.

Click to expand...

Similar to 201 CMR 17 for Mass. However, I work for a Bank so we have Federal and State auditors that take this stuff pretty seriously (you can get your charter removed!). But, we don't have to comply with PCI DSS (just yet; still going to act as if we are). They are still good practices to implement and they are generally the same "best practices" across all different security policies/regulations (like SAS70.. well I guess ISAE 3402/SSAE 16 now; state/federal/vendor).

OneHoppyGuy said:

So a Trojan Horse? Let me guess... out pops a March Pump...

Click to expand...

Actually from GreatBrewEh... lol... gotta take out the giants somehow.