1. IT-Security >
  2. Cyber Security Nachrichten >
  3. What is naganoadigei and why does it pop-up on Linux+Firefox on a recently installed Debian stretch?


ArabicEnglishFrenchGermanGreekItalianJapaneseKoreanPersianPolishPortugueseRussianSpanishTurkishVietnamese
Anzeige

What is naganoadigei and why does it pop-up on Linux+Firefox on a recently installed Debian stretch?

IT Security Nachrichten vom 07.12.2018 um 15:09 Uhr | Quelle reddit.com

I Googled and it's some kind of virus but I use Linux and Firefox and it's a recently installed machine? What's going on?

https://pix.toile-libre.org/upload/original/1544190825.png

I found this:https://askubuntu.com/questions/1087450/how-to-remove-naganoadigei-com-popup-virus

Basically he's saying it's URL injection from my ISP. Is he saying that HTTP requests are being redirected by the ISP? Or is this at the DNS level? It doesn't look to be DNS because I'm using Google's DNS which means my ADSL DSLAM Router is infected?

How do I prevent this at my end? I could use pdnsd+dnscrypt-proxy but if he's redirecting my http requests, I'm sending GET to the correct IP but my ISP is rewriting my pkts to a different destination. The only thing I could do is create a signature of common HTTP websites and match against the GET Response.. somehow?

Some more googling suggests uBlock Origin could be used to block the page using it's 'Filter' settings.

submitted by /u/veekm
[link] [comments] ...

Komplette Webseite öffnen

Newsbewertung

Kommentiere zu What is naganoadigei and why does it pop-up on Linux+Firefox on a recently installed Debian stretch?