[SOLVED] PCUNLOCKER website malware

[nlinecomputers]

Ok just sent a colleague towards PCUNLOCKER and he reports that the website is offering up viagra ads. I tested it and Malwarebytes blocked it as a known phishing site. I'm guessing the site is hacked. I would avoid the product in the future.

 

[fincoder]

Yes the site (that it redirects to) is blocked by MB Browser Guard with:

Website blocked due to pharma​

Website blocked: cheapshopmed.com

What is pharma?​

Pharma is short for "pharmacy." In cybersecurity, the expression refers to spam or websites that traffic in fake or illegal medication. These sites may also sell legal medication, but in violation of local laws.

 

[phaZed]

Ok just sent a colleague towards PCUNLOCKER and he reports that the website is offering up viagra ads. I tested it and Malwarebytes blocked it as a known phishing site. I'm guessing the site is hacked. I would avoid the product in the future.

He went to www.pcunlocker.com - which is not their website and does indeed redirect to different scam viagra sites, etc.

He needs to go to www.top-password.com which is viagra free.

 

[nlinecomputers]

And if you close the viagra add you go to the old pcunlocker site. If they don’t have control over their domain name. Scratch this product of my support list...

 

[phaZed]

Damn. You're right. It is their domain... I like their software, maybe I'll shoot 'em a message.

EDIT: I reported it to their feedback team.

 

[nlinecomputers]

The old site has an expired cert as well.

 

[Porthos]

 

[nlinecomputers]

Damn. You're right. It is their domain... I like their software, maybe I'll shoot 'em a message.

EDIT: I reported it to their feedback team.

The website is hosted on godaddy so I reported it to them.

 

[nlinecomputers]

I just looked this morning and the redirection is gone. The site still allows HTTP connections. Good websites should automatically redirect you to https. Rather disconcerting from a security product.

 

[frase]

Wow PCUNLOCKER unlocks even more potential.

 

[nlinecomputers]

Now the site redirects to https://www.top-password.com/ Which is apparently their main site.

 

[Archon Prime]

Looks like old site was wordpress that was compromised with a redirect script to that other pharm site lol. Good ol WP... piece of ****

 

[frase]

Boot from PXE is a nice addition

I use mine via ISO with Ventoy