( ESNUG 510 Item 2 ) -------------------------------------------- [01/04/13]

Subject: Not a joke; Google marks Synopsys.com as a "Reported Attack Page"!

In the last 2 hours I've had four DeepChip readers directly email me about
this -- plus I tested it myself.  It sounds like Aart de Geus's 2013 is
starting with a very, VERY public prank!  LOL!

[ Follow-up: This was first noticed on 11:18 AM on Friday, Jan 4th.  In the
23 hours since then, 10:43 AM Saturday, Synopsys has fixed this issue. ]

          ----    ----    ----    ----    ----    ----   ----

    Hey, John,

    Click on Synopsys.com!  Google says it's an ATTACK PAGE!  Finally
    the truth gets out!  :)

          ----    ----    ----    ----    ----    ----   ----

    Hi, John,

    Thought in case you haven't noticed it it might make for a fun post.

    Google is reporting Synopsys.com as a malicious site.

          ----    ----    ----    ----    ----    ----   ----

    John,

    I discovered this today when somebody on my team wasn't able to get to
    synopsys.com.  It sounded like something you would cover in DeepChip.

    As a result, our corporate firewall won't let us access their site; also
    Chrome complains about it.

    Please keep me anonymous.

          ----    ----    ----    ----    ----    ----   ----

    FYI -

    Google put a warning on Synopsys.com marking it as an attack page.

    Loved their warning:
 
         "Attack pages try to install programs that steal private
          information, use your computer to attack others, or
          damage your systems."

    Sounds like someone has had recent dealings with Aart's sales guys.  :)

    Anon pls.

          ----    ----    ----    ----    ----    ----   ----

    Diagnostic page for Synopsys.com       Advisory provided by Google, Inc.

    What happened when Google visited this site?

       Of the 274 pages we tested on the site over the past 90 days,
       93 page(s) resulted in malicious software being downloaded and
       installed without user consent.  The last time Google visited
       this site was on 2013-01-04, and the last time suspicious content
       was found on this site was on 2013-01-03.

       Malicious software is hosted on 1 domain: reliablyrebroadcast.org

    Has this site acted as an intermediary resulting in further distribution
    of malware?

       Over the past 90 days, www.synopsys.com appeared to function as
       an intermediary for the infection of 2 sites: vmmcentral.org,
       synopsys.com.cn

          ----    ----    ----    ----    ----    ----   ----
          ----    ----    ----    ----    ----    ----   ----
          ----    ----    ----    ----    ----    ----   ----

 Friday, Jan 4th, 11:18 AM

 Editor's Note: I just clicked on http://www.Synopsys.com and got this:

 

 Don't believe me?  Type in "Synopsys.com" on your browser's address bar or
 click on this http://www.Synopsys.com before Synopsys fixes it and see
 for yourself!  As I said, it's NOT a joke!  Someone pranked Synopsys!

     - John Cooley
       DeepChip.com                              Holliston, MA

[ Follow-up: This was first noticed on 11:18 AM on Friday, Jan 4th.  In the
23 hours since then, 10:43 AM Saturday, Synopsys has fixed this issue. ]

          ----    ----    ----    ----    ----    ----   ----
          ----    ----    ----    ----    ----    ----   ----
          ----    ----    ----    ----    ----    ----   ----

    "See for yourself!"

    John, encouraging folks who might not have Chrome or a good corporate
    firewall to visit a potentially infected site may not be the best idea.

          ----    ----    ----    ----    ----    ----   ----

    I also experienced this.

    First I thought it had something to do with my Firefox settings or an
    accidental click.

    Thanks for sharing.

          ----    ----    ----    ----    ----    ----   ----

    Hah.  I thought I saw an anomaly.

    I guess this is what the new year brings SNPS.

          ----    ----    ----    ----    ----    ----   ----

    How are you so sure it is a prank?  Websites do get infected and pass
    that infection along.

          ----    ----    ----    ----    ----    ----   ----

    Hackers have been busy lately.  I had this problem in late November.
    Simply putting back the old site is not enough since they already
    learned how to hack that.  I had to redesign my site for this.

          ----    ----    ----    ----    ----    ----   ----

    Synopsys.com hacked was happening since Thursday.

          ----    ----    ----    ----    ----    ----   ----

    Way cool!

          ----    ----    ----    ----    ----    ----   ----

    Even I was surprised.  My Internet security wasn't even letting me
    open Synopsys.com from Google search.

          ----    ----    ----    ----    ----    ----   ----

    Not seeing it here ... maybe only in the US??

          ----    ----    ----    ----    ----    ----   ----

    I did not get the same warnings.  Can you give me more details so
    I can look into this further?  I am just accessing www.synopsys.com
    from the Chrome browser.

          ----    ----    ----    ----    ----    ----   ----

[ Follow-up: This was first noticed on 11:18 AM on Friday, Jan 4th.  In the
23 hours since then, 10:43 AM Saturday, Synopsys has fixed this issue. ]

Join    Index    Next->Item






   
 Sign up for the DeepChip newsletter.
Email
 Read what EDA tool users really think.


Feedback About Wiretaps ESNUGs SIGN UP! Downloads Trip Reports Advertise

"Relax. This is a discussion. Anything said here is just one engineer's opinion. Email in your dissenting letter and it'll be published, too."
This Web Site Is Modified Every 2-3 Days
Copyright 1991-2024 John Cooley.  All Rights Reserved.
| Contact John Cooley | Webmaster | Legal | Feedback Form |

   !!!     "It's not a BUG,
  /o o\  /  it's a FEATURE!"
 (  >  )
  \ - / 
  _] [_     (jcooley 1991)