The File is http://giftboxto6czglks.onion/cssbanner.js

Always Keep JavaScript Disabled & Warn people to always Keep the Security Slider on High!

This attacks Windows users using Firefor 47+ With JavaScript enabled
It is injected randomly in the login page
try to find "this.pe.resolve_imported_function("kernel32.dll","VirtualAlloc")"
That will allocate functions inside windows kernel32.dll purely from a numeric lookup table.

 (59 minutes ago)SunnyCapri Wrote:
Timmy (old TGE admin) and Sky (old TGE mod) are telling people right now at the chat to avoid it.


Always Keep JavaScript Disabled & Warn people to always Keep the Security Slider on High!

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I have confirmed from 4 different sources that The Giftbox Exchange is confirmed to be compromised. If you are a “techie” and want to see the source code for proof, please PM me or email me.

crazymonk has posted a verified PGP-signed message on the site, which must mean he is cooperating with LEA. curiousvendetta is also presumed to be compromised, so please also avoid Preteen Feetlove.

Timmy and Aesop are both NOT compromised. They both can be found at Elysium chat (previously Giftbox International) if you want to speak to either. The chat is not on the same server as the forum, so at this time, there is no reason to suspect that the chat is compromised.

Do not go to TGE under any circumstances!

California
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=nnfj
-----END PGP SIGNATURE-----