0

I have a Spring-MVC webapp deployed on a Hostinger VPS server (OS: Ubuntu 18.04, Apache2 + Tomcat servers). For some reason, every now and then, clicking on random regions within the web pages of my webapp causes malicious advert pages to open. The whole code for the webapp was written by myself and I have avoided using any malicious components. The VPS server itself was a clean install so I don't think that could be the source of these ads. I have tried this from multiple devices with the same result.

One thing I should point out is that the website is not running using HTTPS as I am yet to purchase an SSL certificate.

Is there a way to figure out why these ads keep showing up? What could possibly be the reason for these ad popups and what could I do to prevent this?

Improve this question
11
  • 2
    Your stream is getting hijacked. It's not the server, but the connection.
    – schroeder ♦
    Jun 9, 2021 at 19:13
  • 2
    Are you aware of Let's Encrypt and their free TLS certs?
    – schroeder ♦
    Jun 9, 2021 at 19:17
  • @schroeder Could you point me towards some resource that has more info on this kind of hijack? If the connection is being hijacked, is it reasonable to assume that any confidential data sent over prior requests would have be intercepted?
    – P13
    Jun 9, 2021 at 19:26
  • @schroeder I wasn't aware of the free Let's Encrypt SSL certs. Thanks for sharing the resource!
    – P13
    Jun 9, 2021 at 19:29
  • Because you have not encrypted the stream, anything you send or receive on that stream is open to the world. You should not be sending confidential data over unencrypted lines.
    – schroeder ♦
    Jun 9, 2021 at 19:29

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.