Hacked again

Just in case, I'm doing full system scans with both MalwareBytes and Norton Security. I haven't noticed anything suspicious *knock on wood* as of yet.
 
No, it has not. What happened, as far as I could tell, is that the hacker was able to gain access to the admin section of this board and do three things:

1. Add a plugin that redirects users to jforjustice site
2. Add some redirection code to some posts
3. Send out emails from the Admin section

1 & 2 have been fixed and cleaned up.

As far as #3 goes, I've added an extra security layer (other than username/password) which should prevent unauthorized users gaining access to the Admin section.

He's also ninja-editing posts, or posting as other users with their username/passwords:

www.toyota-4runner.org/classic-t4rs/110472-front-bumper.html#post1007954
 
so then it is safe (smart) to assume the hackers have three things of each member:

1) username
2) password for T4R
3) email address

What they can do depends on how smart you are with your passwords. If you used the same password anywhere else then change it now.

I also think the admin is being a bit vague. I understand the reluctance to talk about this in detail but everyone should assume the 3 things above have been compromised.

LASTLY, while it is true the hackers redirected the site to some youtube video, dont assume it was annonymous (mysterious global group with no members list).

The redirect was probably a cover to mask extraction of the user database. That is how these events usually go do.

A) Distract
B) steal database
3) exploit by selling on darkweb (or whatever it is called now)

:bat:
 
Last edited:
Fortunately, my password here is just for forums. Everything else important has another password.
 
No, they will not have the passwords. Passwords are encrypted with a salt. That means that even if they figure out how to decrypt one password (i.e. find the key with which it was encrypted), that won't help them decrypt other's passwords.

username and emails - yes, possibly, but again, they sent out the spam through the site's admin console directly, not by sending one themselves, hence the "from" was us.

As I said before, admin console is now well protected.

so then it is safe (smart) to assume the hackers have three things of each member:

1) username
2) password for T4R
3) email address

What they can do depends on how smart you are with your passwords. If you used the same password anywhere else then change it now.

I also think the admin is being a bit vague. I understand the reluctance to talk about this in detail but everyone should assume the 3 things above have been compromised.

LASTLY, while it is true the hackers redirected the site to some youtube video, dont assume it was annonymous (mysterious global group with no members list).

The redirect was probably a cover to mask extraction of the user database. That is how these events usually go do.

A) Distract
B) steal database
3) exploit by selling on darkweb (or whatever it is called now)

:bat:
 
Nice!

That is just what I wanted to hear.

I am not a security engineer but a friend of mine is and works for the government.

After Sony was hacked he explained to me how salting & hashing work, plus why it is important.

:bat:
 
Dear Anonymous,

The purpose of this message is to inform you about the Revolution:

OCCUPY HOUSES OF PARLIAMENT IN LONDON ON NOVEMBER 5, 2012.
OCCUPY CONGRESS IN WASHINGTON D.C. ON NOVEMBER 11, 2012.

STOP WAR.
CANCEL ALL DEBT.
REDISTRIBUTE WEALTH.

Please, watch the "Nazi Banksters' Crimes Ripple Effect" movie to find out why, how, and to have sound arguments to persuade others. The movie can be easily found with a search engine.

Please, print the flyers at 2012jubilee.info and distribute them.

Please, spread this message and the movie to everyone you know.

-Anonymous


P.S. Please, do not delete this message or something of yours might get deleted. You have been warned.
 

Attachments

  • revolution.jpg
    revolution.jpg
    40.4 KB · Views: 402
LoL.

Good I used a totally unique user name and pass word for this site.

Admin's post a few days ago... "the admin console is well protected now" does not seem to be the case.


Btw, I'm not a hater :) please leave the user threads intact. This is a well liked site.
 
Dear Anonymous,

The purpose of this message is to inform you about the Revolution:

OCCUPY HOUSES OF PARLIAMENT IN LONDON ON NOVEMBER 5, 2012.
OCCUPY CONGRESS IN WASHINGTON D.C. ON NOVEMBER 11, 2012.

STOP WAR.
CANCEL ALL DEBT.
REDISTRIBUTE WEALTH.

Please, watch the "Nazi Banksters' Crimes Ripple Effect" movie to find out why, how, and to have sound arguments to persuade others. The movie can be easily found with a search engine.

Please, print the flyers at 2012jubilee.info and distribute them.

Please, spread this message and the movie to everyone you know.

-Anonymous


P.S. Please, do not delete this message or something of yours might get deleted. You have been warned.

So much for security on this site.... :(
 
Dear Anonymous,

The purpose of this message is to inform you about the Revolution:

OCCUPY HOUSES OF PARLIAMENT IN LONDON ON NOVEMBER 5, 2012.
OCCUPY CONGRESS IN WASHINGTON D.C. ON NOVEMBER 11, 2012.

STOP WAR.
CANCEL ALL DEBT.
REDISTRIBUTE WEALTH.

Please, watch the "Nazi Banksters' Crimes Ripple Effect" movie to find out why, how, and to have sound arguments to persuade others. The movie can be easily found with a search engine.

Please, print the flyers at 2012jubilee.info and distribute them.

Please, spread this message and the movie to everyone you know.

-Anonymous


P.S. Please, do not delete this message or something of yours might get deleted. You have been warned.

LMAO, I think he wants to be apart of the 4Runner family. Its fun to watch. Anyone want to pitch in and get this guy a Runner?
 
He can probably hack into a bank and get the money for the 4runner with diamond studs for wheel locks!
 
Not sure what the hacker wants to achieve here, but back to the drawing board on my side.

I decided not to post updates on what I've found and what I've done to further protect the site. Rest assured that I'm on top of things. Yes, some of them will be unsuccessful, but it's mostly a cat and mouse game. I am also working with admins from other sites.

If you have any specific questions or concerns, email me and I'll respond promptly.
 
Email addresses have certainly been compromised. My spam has gone through the roof since this occurred. I actually sympathized with them before but fail to see how this furthers their cause. :confused:
 
Bofa-

Realize the anyone can play the name "Anonymous", and try to align their objectves with the real "Anonymous" to make it seem like he/she is one of them. This can cause a great deal of havoc in their name though its not them.
 
Well the good news is I may have just found the perfect place to get a mail order bride :naughty: ... and some knock off Nike's.
 

Members online

Forum statistics

Threads
278,307
Messages
3,554,050
Members
248,016
Latest member
Advally Service

Trending content

Back
Top