dirla Posted March 6, 2016 ID:1023566 Share Posted March 6, 2016 Hello, MBAE popped up a message yesterday, that warned me about an expoit code being blocked by the program. Nothing shows up in the log file other than this : An exploit code has been blocked in Mozilla Firefox and its addons. Is this normal ? Shouldnt there be more info , like IP address, file path or anything else relevant to the attack ? As requested i am attaching my log files . Many thanks . Malwarebytes Anti-Exploit.zip Link to post Share on other sites More sharing options...
Staff pbust Posted March 6, 2016 Staff ID:1023603 Share Posted March 6, 2016 Welcome to the forum dirla. It looks like a valid detection of an OS security bypass attempt (ROP gadget detected). You probably encountered some malvertising while navigating a normal site. There is a lot of that going around nowadays. You can learn more about it in our blog:https://blog.malwarebytes.org/category/malvertising-2/ Link to post Share on other sites More sharing options...
Staff pbust Posted March 7, 2016 Staff ID:1023634 Share Posted March 7, 2016 It seems the malvertising in this case loaded from smart-ads.gr which in turn was loaded by enikos.gr or (less likely) frontpages.gr. MBAE blocked the malvertising exploit from executing so you are safe. Link to post Share on other sites More sharing options...
dirla Posted March 7, 2016 Author ID:1023645 Share Posted March 7, 2016 Thank you very much for the detailed explanation ! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now