- News
- Reviews
- Bikes
- Accessories
- Accessories - misc
- Computer mounts
- Bags
- Bar ends
- Bike bags & cases
- Bottle cages
- Bottles
- Cameras
- Car racks
- Child seats
- Computers
- Glasses
- GPS units
- Helmets
- Lights - front
- Lights - rear
- Lights - sets
- Locks
- Mirrors
- Mudguards
- Racks
- Pumps & CO2 inflators
- Puncture kits
- Reflectives
- Smart watches
- Stands and racks
- Trailers
- Clothing
- Components
- Bar tape & grips
- Bottom brackets
- Brake & gear cables
- Brake & STI levers
- Brake pads & spares
- Brakes
- Cassettes & freewheels
- Chains
- Chainsets & chainrings
- Derailleurs - front
- Derailleurs - rear
- Forks
- Gear levers & shifters
- Groupsets
- Handlebars & extensions
- Headsets
- Hubs
- Inner tubes
- Pedals
- Quick releases & skewers
- Saddles
- Seatposts
- Stems
- Wheels
- Tyres
- Health, fitness and nutrition
- Tools and workshop
- Miscellaneous
- Buyers Guides
- Features
- Forum
- Recommends
- Podcast
news
Malware warningroad.cc malware alerts: what happened
Some of you contacted us this evening to let us know about malware warnings on the site. We've been investigating the problem, and here's what we've found out...
So, what happened?
Somebody utilised a back door in one of the scripts in our ad serving platform, and used it to add a javascript call to some of the banner ads on the site. The call was to a malware site.
What are you doing about it?
We've deleted the offending scripts and we'll be doing a clean install of our ad serving software from the newest available version to make sure that any known vulnerabilities are removed. In the meantime we've set up processes to check for any new scripts being added, and remove them immediately.
Is my personal data safe?
Yes - the ad database is separate from the site database, and to be on the safe side we've changed all the back-end passwords site-wide.
Why am I still getting malware warnings?
Google is constantly spidering websites collecting information - those spiders will have flagged up the attempted malware attack on road.cc to Google as it happened yesterday. Even though we were instantly aware of the attack and removed the rogue script that flag will automatically appear on Google searches to this site and will have been picked up by browser security setting particularly those for Google Chrome, Firefox and Safari. We have asked Google to review and remove its warning about the site because road.cc is NOT infected with malware. For now all we can do is wait for Google to review the site at which point those malware warnings will stop. Be assured that we take the security of this site very seriously and will continue to do so.
What should I do if I get another malware warning on road.cc?
Email us at info [at] road.cc and let us know, giving as much info as possible.
Dave is a founding father of road.cc, having previously worked on Cycling Plus and What Mountain Bike magazines back in the day. He also writes about e-bikes for our sister publication ebiketips. He's won three mountain bike bog snorkelling World Championships, and races at the back of the third cats.
Latest Comments
- ktache 3 hours 28 min ago
The small frame, the aggressive posture, lots of standover height.
- mctrials23 4 hours 24 min ago
As i've said before, the police should be sued for a lot of money when someone they have knowingly ignored has gone on to commit a serious crime....
- David9694 4 hours 31 min ago
'Bad parking' blocks firefighters multiple times on same emergency call-out...
- David9694 4 hours 35 min ago
Cambridgeshire boy, 13, crashes Audi into garden wall after taking it from home...
- Adam Sutton 5 hours 21 min ago
Good stuff. Now do it on cycleway C9 through Hammersmith to Chiswick.
- mark1a 5 hours 30 min ago
It's technically allowed but it's not known as "London's Orbital Car Park" for nothing.
- Dogless 6 hours 38 min ago
You're defending bombing hospitals and refugee camps and starving children.
- mattw 9 hours 18 min ago
Used car salesman is a complete attention-seeking plank....
- tubasti 9 hours 35 min ago
I don't know if they're any better, but they's certainly become more boring.
- FionaJJ 10 hours 1 min ago
At risk of being cynical, and stereotyping the police, it's so they don't have to leave the comfort of their panda cars and pursue on foot when...
Add new comment
13 comments
The web still has ads?
Tony, FYI I have just been confronted by Facebook's alert mentioned above by Gkam84.
The good news is Google has stopped flagging the site so hopefully we can all get back to the usual stuff of talking about bikes, and riding in all their various forms
I tried to get in this morning to add Oliver Zaugg and Dan Martin to my fantasy league team but was blocked. Anyone know how they got on?
Switch the google tracking off in your browser settings. They aren't trustworthy and - like on road.cc - usually only flag mainstream sites after the problem has been fixed. Just keep your antivirus and intrusion detector up to date!
Nah i think i'll leave my browser settings as they are, they are there for a reason
As for anti virus and intrusion software, i've yet to find one that works for me, being a techy i'm quite happy to run my systems without it and haven't used anti virus for around 12 years
Two reasons in fact: security theatre and big brother!
Ah ha, that explains why i can't get from your facebook links to, just get a security warning from there aswell
Yes, I only got it a little while ago myself when I quit out of Safari and then turned it on again. I've just added a bit to the original story about why that is happening - basically it's the security settings in your browser picking up the flag from Google - they all link back to that Google message.
As Dave says above, we've asked Google to review the flag and we're confident that when they do it will be removed.
I just wish they'd hurry up
Didn't have it before but I just got it now.
I always knew you guys were up to something. You'll be telling me to put my road shoes in the freezer next....tsk tsk!
that may be because google has picked up the infected pages and is marking them as attacked; we've requested a review of that.
I just got it again this second, its 5.34am GMT
Every different section, News, Forum......etc gives me another one