joburg.org.za infected with an virus?

[Grasmuis]

Seems like city of joburg website has been infected with an virus.

Google -
Firefox -

 

[Creag]

Good grief! This search...

City of Johannesburg - 12/02/2015: Human Papilloma Virus ...
https://joburg.org.za/index.php?option=com_content&id=9497:12022015-human
This site may harm your computer.
Feb 12, 2015 - The virus can infect the genital area and cause a genital wart or cervical and other cancers. The vaccination ... Website: www.joburg.org.za.

Google is on form this afternoon.

 

[halfmoonforever]

whwhahahaahaha

 

[Scampup]

Google Safebrowsing is the main one picking up something they think is bad here:
https://virustotal.com/en/domain/joburg.org.za/information/

Considering the wide source of their net, even at times stumping people in the IT security sector with them asking why. Google is not very good at sharing reasons, but to only be proven correct later.

Like Google or hate them, that's irrelevant atm. I'd be very cautious.

 

[halfmoonforever]

Google Safebrowsing is the main one picking up something they think is bad here:
https://virustotal.com/en/domain/joburg.org.za/information/

Considering the wide source of their net, even at times stumping people in the IT security sector with them asking why. Google is not very good at sharing reasons, but to only be proven correct later.

Like Google or hate them, that's irrelevant atm. I'd be very cautious.

Yea no. Google tells you exactly what is wrong on Webmaster Tools, with nice notifications and "what next" suggestions. So even if you clean the virus, they might take a while to take it off their list if you don't follow up with them directly and submit your site for reconsideration.

I was able to clean 13 of my clients' websites (hostgator shared hosting is rife with malware, do not use) and it took them roughly 24 hours to respond after resubmitting the sites as "clean" and took it off the list.

 

[TheRedBar0n]

Malware infection indeed:

https://sitecheck.sucuri.net/results/joburg.org.za (likely compromised Joomla!)

And some malware communicating directly with that domain( :erm: ):

https://www.threatcrowd.org/domain.php?domain=joburg.org.za