New link in the top of page "IRC Chat".
Register | Login
Views: 134561614
Main | Memberlist | Active users | Calendar | Last Posts | IRC Chat | Online users
Ranks | FAQ | XPW | Stats | Color Chart | Photo album
10-31-24 07:23 PM
0 users currently in General Chat.
Xeogaming Forums - General Chat - In case you guys receive the same attacks | |
Next newer thread | Next older thread
User Post
davideo7

Micro-Goomba








Since: 11-03-04

Since last post: 4846 days
Last activity: 4822 days
Posted on 07-03-11 02:50 PM Link | Quote
In case you guys receive the same attacks that vizzed received by a group of Russians last month. Elara asked if she could use the info I gathered about the attacks for Xeogaming and I decided it'd be best if I shared it myself. They seem to be targetting random sites, and I think primarily forums.

(copy and pasted what I posted on vizzed)

Here's what they've done so far:
-They've hacked into the DB to get my password hash and than logged into my account
-Someone sent me a PM letting me know that there was a virus on the site but the guy that got into my account deleted it so I wouldn't see it
-They've injected a virus into the site about 4 different times now in the past 5 days, basically they somehow modified pages on vizzed by making it load a javascript file which iframes to another site that sends a virus to the viewers computer
-The viruses they've used to attack users of vizzed are 'blackhole toolkit website 7' and 'blackhole toolkit website 5' (and possibly 'blackhole toolkit website 3' but I never saw that one)

I've implemented security to prevent them from getting into my account again and I'm working on figuring out how they're modifying my Javascript and PHP files.

This is what I know about the hackers:
-Their referral url was http://alexa.stasyan.ru/list/50200/
-I've tracked 3 of their ips (could be more) which are: 188.232.141.90, 90.150.41.134, 94.51.169.44
-They signed up with this user account http://www.vizzed.com/vizzedboard/profile.php?id=123104 and used the email address privetzayka@bk.ru
-The attackers are most likely from russia because I tracked the 3 ips to there, the referral url was a russian url and their email address was a russian email address
-Like I said earlier, a ton of other sites have been injected with the viruses


(Last edited by davideo7 on 07-03-11 02:52 PM)
Elara

Divine Mamkute
Dark Elf Goddess
Chaos Imp
Penguins Fan

Ms. Invisable








Since: 08-15-04
From: Ferelden

Since last post: 78 days
Last activity: 78 days
Posted on 07-03-11 03:16 PM Link | Quote
Thank you again for sharing the info with us. Hopefully we are a small enough target, but it is good to be prepared.
Bitmap

#1 Enhancement Shaman US Ravenholdt








Since: 09-05-04
From: His Laughin' Place

Since last post: 4535 days
Last activity: 4529 days
Posted on 07-03-11 09:21 PM Link | Quote
E- Oh Vizzed does not use that much of Acmlm's code. Here i was thinking it does.

neat little site too

E2- Seems your reregistration thingie is kinda borked. Have not got an activation E-mail or anything. Checked junk mail and just everything else.


(Last edited by Bitmap on 07-03-11 09:50 PM)
davideo7

Micro-Goomba








Since: 11-03-04

Since last post: 4846 days
Last activity: 4822 days
Posted on 07-03-11 11:25 PM Link | Quote
Bitmap: Haven't had any reports of other people having troubles registering, that's something I'll have to look into sometime . Yeah the site itself was originally all acmlm code but now the overall site is probably only 25% acmlm code, most of the custom code being done by me.
Bitmap

#1 Enhancement Shaman US Ravenholdt








Since: 09-05-04
From: His Laughin' Place

Since last post: 4535 days
Last activity: 4529 days
Posted on 07-04-11 12:56 AM Link | Quote
Yeah i tried registration twice now and I have not gotten an E-mail as of yet. Trying again now.

E- Tried a different E-mail (Gmail) And still nothing. Trying to join as KatamariDemocracy seen how Bitmap was taken sadly!


(Last edited by Bitmap on 07-04-11 01:05 AM)
Elara

Divine Mamkute
Dark Elf Goddess
Chaos Imp
Penguins Fan

Ms. Invisable








Since: 08-15-04
From: Ferelden

Since last post: 78 days
Last activity: 78 days
Posted on 07-05-11 11:55 PM Link | Quote
Like I told you in the PM, I searched the member database and no one has the name Bitmap. Strange.

Did you check the spam box to see if the emails went in there? I know you probably did, but just making sure.
Bitmap

#1 Enhancement Shaman US Ravenholdt








Since: 09-05-04
From: His Laughin' Place

Since last post: 4535 days
Last activity: 4529 days
Posted on 07-06-11 12:44 AM Link | Quote
Yeah I did, and I even used a different E-mail.

The E-mail I used were:

Spoiler:
Sajin_neko@yahoo.com and Firefoxsajin@gmail.com


Still, no E-mail.
davideo7

Micro-Goomba








Since: 11-03-04

Since last post: 4846 days
Last activity: 4822 days
Posted on 07-13-11 03:34 PM Link | Quote
Bitmap: After a few site updates I did a while back, apparently it must have caused some people to not receive emails for some odd reason. Should be fixed now, try again please.
Bitmap

#1 Enhancement Shaman US Ravenholdt








Since: 09-05-04
From: His Laughin' Place

Since last post: 4535 days
Last activity: 4529 days
Posted on 07-14-11 12:00 AM Link | Quote
Nope, still nothing. I think something is still not fixed
Cteno

Super Shotgun
Moderator








Since: 01-11-05

Since last post: 71 days
Last activity: 68 days
Posted on 07-23-11 02:50 AM Link | Quote
I just tried to log in to tell you that Bitmap needed to say something... and my account didn't exist anymore. Also, I'm not getting an activation code sent to my email! Definitely bizarre.
Bitmap

#1 Enhancement Shaman US Ravenholdt








Since: 09-05-04
From: His Laughin' Place

Since last post: 4535 days
Last activity: 4529 days
Posted on 07-23-11 02:54 AM Link | Quote
Is anyone able to get in touch with DaVideo7 about this outside of the forums?

I mean I have Trillian, so I can use every chat program out there. Tried his E-mail but no response.

davideo7

Micro-Goomba








Since: 11-03-04

Since last post: 4846 days
Last activity: 4822 days
Posted on 07-25-11 11:12 PM Link | Quote
Nelrith: You use to have an account on vizzed and now it no longer exists? When did you create it?

Bitmap: I just PMd you the activation URL.
Cteno

Super Shotgun
Moderator








Since: 01-11-05

Since last post: 71 days
Last activity: 68 days
Posted on 07-26-11 01:58 AM Link | Quote
If I had to guess, I'm assuming two or maybe three years ago. I always register everywhere with the same name and I usually don't change passwords at all. I tried logging in and it said that I didn't exist at all.
davideo7

Micro-Goomba








Since: 11-03-04

Since last post: 4846 days
Last activity: 4822 days
Posted on 07-26-11 07:08 PM Link | Quote
We had an incident about 2 months ago where a few accounts somehow got deleted. I was able to recover most of those accounts but some didn't get recovered, I wonder if yours was one of those that got deleted and never recovered. Do you know if you made any posts with that account?
Cteno

Super Shotgun
Moderator








Since: 01-11-05

Since last post: 71 days
Last activity: 68 days
Posted on 07-26-11 11:15 PM Link | Quote
None whatsoever, I was a huge lurker when I showed up.
Next newer thread | Next older thread
Xeogaming Forums - General Chat - In case you guys receive the same attacks |



xeogaming.org

AcmlmBoard 1.92++ r4 Baseline
?2000-2013 Acmlm, Emuz, Blades, Xkeeper, DarkSlaya*, Lord Alexandor*
*Unofficial Updates
Page rendered in 0.177 seconds.
0.035