FPL main website got hacked?

Have a question or problem with your Fongo application? This forum is the place to get help from both staff and fellow community members.
Fongo recommends Fongo Home Phone for a fully supported Home Phone system for only $4.95/mo
Captain
Just Passing Thru
Posts: 2
Joined: 11/11/2016

FPL main website got hacked?

Post by Captain »

Today I was visiting FPL to update some account info. By using it I realized that the site was sending me to some advertisement page that has been flagged as scam or phishing sites on IE/FireFox/Sophos Firewall.

By analysis the code, I found that, in xywindow.js (See attached image):
It will create a clickable empty image, where it will send user to: "https://www.freephoneline.ca/pdf/safe.html", and then redirect the user to some scam or phishing sites.

According to the script, this image will be created 5 seconds after the page is fully loaded, and then disappeared 30-35 seconds. This image will be created to the right of the screen (See 2nd attached image, where highlighted empty area on the right).


I have been using FPL long enough, I love what FPL provides. However, I have never acknowledged that FPL/Fongo have any affair with those scam/phishing sites. Therefore I suspect, it was hacked.
Of course, those advertisement could be added by FPL/Fongo to earn more $ for the company, in that case I can only suggest users not to click on those websites and DO NOT download any file there if you want your computer to be clean.

Support ticket also created: #211271, I am hoping to have FPL/Fongo resolve this issue asap if it was not intended to have those.
You do not have the required permissions to view the files attached to this post.
User avatar
Liptonbrisk
Technical Support
Posts: 3332
Joined: 04/26/2010
SIP Device Name: Obihai 202/2182, Groundwire
Firmware Version: various
ISP Name: FTTH
Computer OS: Windows 64 bit
Router: Asuswrt-Merlin & others

Re: FPL main website got hacked?

Post by Liptonbrisk »

Please do not send me emails; I do not work for nor represent Freephoneline or Fongo. Post questions on the forums so that others may learn from responses or assist you. Thank you. If you have an issue with your account or have a billing issue, submit a ticket here: https://support.fongo.com/hc/requests/new. Visit http://status.fongo.com/ to check FPL/Fongo service status. Freephoneline setup guides can be found at http://forum.fongo.com/viewforum.php?f=15.
Captain
Just Passing Thru
Posts: 2
Joined: 11/11/2016

Re: FPL main website got hacked?

Post by Captain »

Liptonbrisk wrote:The problem is fixed now: http://forum.fongo.com/viewtopic.php?f=8&t=18835#p73961

Yea I realized that, I posted this yesterday... This post just got approved today... thats why...