Jump to content

KAPPA.LOL via Customs Forge is trying to infect my PC with Malware. Please check

Greetings;

I am a huge fan of CusstomsForge and check your site daily multiple times a day and have even commissioned custom CDLC from Gov't Mule.  I love it and consider it essential to my playing and happiness. I am also a Sr. Security Architect.  Starting on Feb 17, 2025 I started blocking malware attempts via your web page that are being sourced from kappa.lol - IP address 172.67.213.73 - I get the breach attempt every-time I refresh the search engine page.  I just assumed you would be on top and take care of it.  So I just informing you in case you had not noticed yet.  It could be a false positive, but I error on the side of caution and block first. 

Virus Total has 1 hit on the site as malicious: https://www.virustotal.com/gui/url/768124885d0de5d3c67f0c9fbf93d203db2cc0ab56bf0abd147cd0ba9803ade4

https://ignition4.customsforge.com/

I really appreciate all that you all do for the Rocksmith community - Keep up the great work.  Hope this was helpful.

image.thumb.png.093126bc69f267076c64ae1aec52c4a2.png

Featured Replies

  • Author

I just spoke with Fortigate support and they are reclassifying the site KAPPA.LOL as malicious and Malwarebytes now has it listed as RiskWare.  It is attempting to install software without permission.

image.png.2c7f3973012d1a6c4daf41f5f7d2cd97.png

Edited by AtrumAnimus
forgot attachment

Hey

I can confirm too, that Malwarebytes keep saying "Kappa.lol" but with A different IP adresses.

 

Capture d’écran 2025-02-22 211258.png

  • Administrator

We have switched ad providers, please confirm if this is still happening. Unblocking the ads would be appreciated. Thanks

 

On 2/22/2025 at 3:15 PM, WaynePlay said:

Hey

I can confirm too, that Malwarebytes keep saying "Kappa.lol" but with A different IP adresses.

 

Capture d’écran 2025-02-22 211258.png

 

On 2/21/2025 at 10:01 AM, AtrumAnimus said:

Greetings;

I am a huge fan of CusstomsForge and check your site daily multiple times a day and have even commissioned custom CDLC from Gov't Mule.  I love it and consider it essential to my playing and happiness. I am also a Sr. Security Architect.  Starting on Feb 17, 2025 I started blocking malware attempts via your web page that are being sourced from kappa.lol - IP address 172.67.213.73 - I get the breach attempt every-time I refresh the search engine page.  I just assumed you would be on top and take care of it.  So I just informing you in case you had not noticed yet.  It could be a false positive, but I error on the side of caution and block first. 

Virus Total has 1 hit on the site as malicious: https://www.virustotal.com/gui/url/768124885d0de5d3c67f0c9fbf93d203db2cc0ab56bf0abd147cd0ba9803ade4

https://ignition4.customsforge.com/

I really appreciate all that you all do for the Rocksmith community - Keep up the great work.  Hope this was helpful.

image.thumb.png.093126bc69f267076c64ae1aec52c4a2.png

 

"Just remember: when something breaks, kick it as hard as you fucking can"

-Trent Reznor
Support Me (Via Patreon)

Just starting today for me, but Malwarebytes is blocking kappa.lol every time I change pages on the main search page.

blocked.PNG

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

Recently Browsing 0

  • No registered users viewing this page.


Important Information

By using this site, you agree to our Guidelines. We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. - Privacy Policy

Account

Navigation

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.