Winamp message board thread contains malicious iframe

[musicf8]

https://twitter.com/thlnk3r/status/838903679533137920

checked the source code and yeah it's in there, though the domain is suspended it makes me wonder wtf

[DJ Egg]

investigating.....

[thinktink]

Thank heavens for ad blockers! Yikes!

[musicf8]

Looks like the malicious iframe has been removed.

[BFeely]

They need to add HTTPS, post-haste. My Chrome is persistently warning me that signing in is not secure.
It would probably also help protect the admins from "watering hole" attacks that could be used to inject more malicious crap in the future.
And considering most of this malicious stuff is likely hosted on plaintext sites, going HTTPS would make it more difficult for hackers to deliver the content.