META: Symantec Endpoint Protection Marking MGO as a Blackhole Toolkit Website

META: Symantec Endpoint Protection Marking MGO as a Blackhole Toolkit Website

Submitted by Mgobowl on June 11th, 2011 at 7:58 PM

The title says it all. Over the past couple of weeks I have been getting this warning while visiting MGoBlog:

[SID 24092] Web Attack Blackhole ToolKit Website detected.

I am running XP SP3 and using the most recent version of Firefox as my browser. I thought maybe the issue was on my end, but running scans with my Symantec Endpoint Protection and Malwarebytes has yielded nothing.

The warning pops up when I have multiple tabs open including MGoBlog. However, if I open the browser and visit MGoBlog as the first website it still pops up leading me to believe it is a problem with the site.

I have also been able to make the warning pop up by reloading the site multiple times. The ads are also different every time the warning pops up, so I don't think it's a problem with a specific ad. I've already emailed Brian, but I thought I'd ask the crowd if they are also noticing something similar. Hopefully this is not a precursor to another Malware mess.