Brodak Website "Not Secure"

[Kevin Muckleroy]

Brodak Website
Anyone else having a security issue with the Brodak Website?
Not Secure
IPS Alert: Web Attack: Formjacking Website 2
Attacking Computer: bootstrap-js.com (92.63.197.77, 443)

[Bill Sequira]

Yes Kevin, I got the same report from my Norton protection you did. I first noticed it about 2 days ago.

[kevin king]

I also heard they are dealing dope from that website, and will ship it right to your door.

[Steve Helmick]

I also heard they are dealing dope from that website, and will ship it right to your door.

Various types and even colors, too!  Steve

[Gerald Arana]

Various types and even colors, too!  Steve

Yes, And I've been snorting that stuff for over 50 years 50 years 50 years...

Jerry

[john e. holliday]

I am on the Brodak site now with no problems.

[Kevin Muckleroy]

I am on the Brodak site now with no problems.

What internet browser and anti-vrus you using?

[Brett Buck]

Brodak Website
Anyone else having a security issue with the Brodak Website?
Not Secure
IPS Alert: Web Attack: Formjacking Website 2
Attacking Computer: bootstrap-js.com (92.63.197.77, 443)

    Norton AV is a lot more dangerous than anything you are going to find on the Brodak website. Just turn it off, and uninstall it (to the extent it can be uninstalled)


     Brett

[Kevin Muckleroy]

    Norton AV is a lot more dangerous than anything you are going to find on the Brodak website. Just turn it off, and uninstall it (to the extent it can be uninstalled)


     Brett

It has protected my PCs for almost 20 years never had a problem with Norton and had never had a virus. So I really can not believe that Norton is a problem.
The IP address is from Moscow it is a Formjacking Website. Fill in the form and all info including what used for purchase Credit card number gets sent also to them.
I will not take a risk purchasing from Brodaks Website until they correct this. For more on Formjacking:
https://www.symantec.com/blogs/threat-intelligence/formjacking-attacks-retailers

[Peter Grabenstein]

Hope John Brodak will fix this quick as possible.

 
Peter

[Ken Culbertson]

    Norton AV is a lot more dangerous than anything you are going to find on the Brodak website. Just turn it off, and uninstall it (to the extent it can be uninstalled)


     Brett

AMEN - I think Norton IS a virus.  It sees your computer's memory and says "MINE".

Ken

[Ken Culbertson]

Hope John Brodak will fix this quick as possible.

 
Peter

I don't think it is John.  I have had the problem from some of my computers but not all.  That tells me that it is probably an advertising link that is infected that I get on some computers but not others.  When it happens, check Task Manager and see if there are processes running you didn't start.  Easy in W7, hard in W10.  Also try add blocking and see if it stops.

Ken

[Brett Buck]

It has protected my PCs for almost 20 years never had a problem with Norton and had never had a virus. So I really can not believe that Norton is a problem.
The IP address is from Moscow it is a Formjacking Website. Fill in the form and all info including what used for purchase Credit card number gets sent also to them.
I will not take a risk purchasing from Brodaks Website until they correct this. For more on Formjacking:
https://www.symantec.com/blogs/threat-intelligence/formjacking-attacks-retailers

      There is nothing much wrong with Brodak's website, it is Norton AV that is the problem. If you don't understand why, then please do some research.

     I have no stake in Brodak's success, one way or the other. This *is not a problem with John's site*, this is a false detect from Norton.

      Brett

[Fredvon4]

I use AVG and Brodak site is secure to me and my Win 10 & Google laptop

[john e. holliday]

What internet browser and anti-vrus you using?

Just got on the Brodak site again and no problems.  I am on Windows 10 that does not let me have sound.  The internet Is MSN(Microsoft).  I also get up on Yahoo.

[Steve Helmick]

John, I doubt if there would be any problem at all until you start to pay for something. Just how far along did you get into an order before you decided all was well?  Steve

[Dave Harmon]

I put something in the cart but didn't actually buy it....I cancelled the cart and there was no problem.
I did not go far enough to actually put in the card number.
Perhaps the OP could tell us how far he went with the transaction before the AV detected a problem.

[Mike Griffin]

I am using Windows 10 and do not use Norton for anti virus.  Here is a screen shot of what I see when I go to the website.

Mike

[Ken Culbertson]

I am using Windows 10 and do not use Norton for anti virus.  Here is a screen shot of what I see when I go to the website.

Mike

That virus would have been on your computer, not John's.  That is not a Norton alert.  It is  likely that you would have gotten the alert anywhere you tried to use a CC.  It just happened that you were wisely using it to support out hobby.

Ken

[Kevin Muckleroy]

I am using Windows 10 and do not use Norton for anti virus.  Here is a screen shot of what I see when I go to the website.

Mike

Good to see someone else with out Norton AV is getting the same result as I.
Btw Just going to the site home page is also when I get the warning or any linked pages on the site.

[Frank Imbriaco]

I got the  same message and I'm using Windows 7 with Norton. If I were ordering, I'd just call. The ladies at the store are always very nice and they have (or will find out) up to the minute info on all products in stock.

[rich gorrill]

I also got the warning from Norton, glad too see I was not the only one.

[Abi]

brodak.com is a target for hackers due to a simple item that site developers did not configure: automatic re-direct from http to https. the one letter S is what encrypts all communication with the website. hackers scan the internet for misconfigured web sites. When they find them, they try to break into them since it allows for easy stealing of passwords and credit card information. Configuring brodak.com to except https will remove as a target for hackers. As of now, it's akready been compromised already and needs to be fixed asap.

[Mike Griffin]

Good to see someone else with out Norton AV is getting the same result as I.
Btw Just going to the site home page is also when I get the warning or any linked pages on the site.

Me too Kevin.  It comes up immediately when you get to the site without navigating anywhere in their site.  I have no idea what is going on but I do not get that warning by going to other sites. 


Mike

[Ken Culbertson]

I am coming around to suspect that John's site might be infected.  All of my computers act differently.  On most I run 3 or more virus programs and the indications I was getting led me to believe it was simply a redirect to an advertising site that was infected but Abi is right.  I failed to notice the http/.

Bottom line DOES BRODAK KNOW ABOUT THIS?

Ken

[Kevin Muckleroy]

brodak.com is a target for hackers due to a simple item that site developers did not configure: automatic re-direct from http to https. the one letter S is what encrypts all communication with the website. hackers scan the internet for misconfigured web sites. When they find them, they try to break into them since it allows for easy stealing of passwords and credit card information. Configuring brodak.com to except https will remove as a target for hackers. As of now, it's akready been compromised already and needs to be fixed asap.

Thats correct . if I type in the https:// I do not get the warning. BUT as soon as ya click on another page it goes back to http unsecured.

[Tony Drago]

 I just got off the phone with Sandi at Johns. They are looking into it. I emailed them the info from Stunt Hanger to John.  They did forward that info to the people today who maintain their computers and web sites.  Sandi said that she would relay any information that she receives to me.I will then forward the info and keep Stunt Hanger in the loop.

[GERALD WIMMER]

A big thanks for all those who brought this up and to Tony for following up and contacting Brodak's, I was hoping to place an order but this got me worried but sounds like it should be sorted soon. 
Regards Gerald

[Tony Drago]

Thank you. Right now i would just do the phone orders.

[frank williams]

I'm on a linux system with Firefox .... I've been having the problem for several days.   (Error code: ssl_error_no_cypher_overlap)

[proparc]

I also heard they are dealing dope from that website, and will ship it right to your door.

 

[Tony Drago]

Just heard from Sandi at Brodaks. The site did have a bug. They found it,contained it and gave it a shot of Raid to make sure its stays dead. They are also working on the http so it can show that the site is secure as in https.

[John Tate]

I talked to Jan Hower there at Brodak's. She asked me to post the following: 

Hello,
I am the web guru for Brodak web-site. Our web site is a secure site. It has not been hacked in anyway. FYI our web site NEVER saves credit card information! If you are running an anti-virus of some sort you may be having issues. From time to time the anti-virus programs will pick-up certain words like “dope” “bombs” and “missiles” and detect them as virus words that will kick your program into play.

Also, ads & web sites from all over the world are prone to be full of unsecure sites & viruses.

 

Thank You & Happy Flying

Jan

[Ken Culbertson]

"Just heard from Sandi at Brodaks. The site did have a bug. They found it,contained it and gave it a shot of Raid to make sure its stays dead. They are also working on the http so it can show that the site is secure as in https."

I talked to Jan Hower there at Brodak's. She asked me to post the following: 

Hello,
I am the web guru for Brodak web-site. Our web site is a secure site. It has not been hacked in anyway. FYI our web site NEVER saves credit card information! If you are running an anti-virus of some sort you may be having issues. From time to time the anti-virus programs will pick-up certain words like “dope” “bombs” and “missiles” and detect them as virus words that will kick your program into play.

Also, ads & web sites from all over the world are prone to be full of unsecure sites & viruses.

 

Thank You & Happy Flying

Jan

We have just heard from CNN and FOX.

I am "in the business" and I vote for the Guru.

Ken

[RC Storick]

If you look at the address bar here on Stunt Hanger is says https: If you look at Brodak it says http: The only difference is we pay for a security certificate to secure our site he does not. You will notice a little lock top left here and none on Brodak.