As reported yesterday there was a major problem with the 2Manuals.com website. Thanks to a bit of persistence and a lot of work the 2manuals site owner was able to resolve the problem and finally remove the iframe malware that was polluting all pages.
Whilst it’s good to see the site up and running again, this is where my “Security conscious” self kicks in and recommends you still ensure you scan all utilities and downloads purchased from this and/or received from this or any other site. It’s far too easy to ignore this basic advice and end up with an infected PC if you’re not careful.
There have been some other lingering issues with downloads being unavailable or similar so I’ll follow those up with the site owner but for now it seems 2Manuals is back up and running again
I have been trying to pay using Paypal but it does not let me. I have emailed them and JOHN (the owner of the site) told me that there were problems but paypal transactions were taking place. I tried yet again with no luck. I installed Firefox and when I went to login at the site
this appeared. Could they have been hacked again. See below
This Connection is Untrusted
You have asked Firefox to connect
securely to http://www.2manuals.com, but we can’t confirm that your connection is secure.
Normally, when you try to connect securely,
sites will present trusted identification to prove that you are
going to the right place. However, this site’s identity can’t be verified.
What Should I Do?
If you usually connect to
this site without problems, this error could mean that someone is
trying to impersonate the site, and you shouldn’t continue.
Technical Details
http://www.2manuals.com uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is unknown.
(Error code: sec_error_unknown_issuer)
I Understand the Risks
I’ve had a look at the error and it looks like the SSL certificate wasn’t installed properly. If I read things correctly the issue is caused by someone missing the need to install the certificate chain which validates the issuing authority. As a result it is unlikely this is directly related to the earlier problems.
I expect John will comment when he’s seen my email letting him know about the problem. That said, perhaps the best thing to do for now is wait until you hear more.