Site hacked?

Status
Not open for further replies.
R

r32

New member
FYI guys

Looks like it got hacked. Would definitely avoid downloading anything from this site, just to be safe. Probably change your password too if you can. Or just don't login right now. Also, site is NOT HTTPS which means no SSL certificate, so be careful here, since it looks compromised. This should be pinned at top of all forums and posting should be turned off until solved.

Software used for this forum is vBadvanced CMPS v3.2.2
Current Version: 4.3.0 (Released 05-13-2014) (hasn't been maintained in 4+ years. Ouch.)

And vBulletin used for this forum is vBulletin Version 3.8.7 (2009 holy shit man!)
Current Version: 5.4.5 (November 14, 2018)

Forum software is at least 5 years out of date. Holy shiiiiiz. Basically an accident waiting to happen. vBadvanced CMPS v3.2.2 appears to be around 2012 and I'm seeing known exploits with version 3.2.2 google search. Is site owner over his head on keeping forum software upgraded? I hope they have a db backup, otherwise they are really up a creek without a 4Runner. I hope our info wasn't compromised.
 
Register to hide this ad
Complete rebuild from scratch with new db. Old posts will have to be exported from db, scanned for malware, and imported into a new installation using latest forum software. The vBadvanced software isn't even maintained any more by the dev and hasn't been updated in since 2014. So whatever features that served up will have to be solved with another plugin or custom coded. And getting an SSL certificate is a MUST moving forward. I'll probably stop using the site if they don't get this implemented. There's just no excuse for this, especially with a site this big.

Hey [MENTION=5653]admin[/MENTION], if you need help, let me know. Seems like you're in over your head on this. If it has been compromised, it's going to take a ton of work to get this moved to a fresh install using latest software. Probably more than a one-man show could handle.
 
its not pleasing to surf this site anymore. its slow and not secure.

been a member since 2009. don't let this site die...
 
I don't want to see it die either. It's been a fantastic resource and great community.

Always assumed site owner kept it up to date as it looks like he has sponsors which means some income. But after today, seeing 5yr out of date forum software was kind of shocking. Major updates need to happen, moving forward. Going to take some late nights for sure. :D
 
Last edited:
r32 said:
I don't want to see it die either. It's been a fantastic resource and great community.

Always assumed site owner kept it up to date as it looks like he has sponsors which means some income. But after today, seeing 5yr out of date forum software was kind of shocking. Major updates need to happen, moving forward. Going to take some late nights for sure. :D
Click to expand...

I run a forum and it's not that hard these days to port over to different forum software. Most of them have scripts built in to handle the transfer from database to database. I've stopped using T4R for the most part except for a couple threads because the software here blows. With the amount of money they're making off sponsers, ads, and vendor requirements there's more than enough to have this place running off better software with better security. It's far too outdated and such a hack as this (where it seems just about everything is compromised) is just ridiculous in this day and age. I've already started changing my passwords on other forums but I won't touch this password until the situation has been resolved. Otherwise I may just request my account be deleted.
 
  • Like
Reactions: r32
Drunner97 said:
I run a forum and it's not that hard these days to port over to different forum software. Most of them have scripts built in to handle the transfer from database to database. I've stopped using T4R for the most part except for a couple threads because the software here blows. With the amount of money they're making off sponsers, ads, and vendor requirements there's more than enough to have this place running off better software with better security. It's far too outdated and such a hack as this (where it seems just about everything is compromised) is just ridiculous in this day and age. I've already started changing my passwords on other forums but I won't touch this password until the situation has been resolved. Otherwise I may just request my account be deleted.
Click to expand...

Yes, def scripts out there can handle the transfer of posts and info, but site has been compromised, so it's entirely possible you'd be moving malware to the new site.
 
r32 said:
Yes, def scripts out there can handle the transfer of posts and info, but site has been compromised, so it's entirely possible you'd be moving malware to the new site.
Click to expand...

Yeah, you'd have to go off an older backup before doing any transferring/updating. Just to make sure you've cleared it all.
 
Heard back from Admin. Problem has been fixed.

Just before i get a bunch of PMs or comments...i am NOT the moderator or admin...so, i have no idea about anything else. :D
 
Thai said:
Heard back from Admin. Problem has been fixed.

Just before i get a bunch of PMs or comments...i am NOT the moderator or admin...so, i have no idea about anything else. :D
Click to expand...

Problem may be fixed but what are they going to do make sure it doesn't happen again? As mentioned, the site is on ridiculously old software. I know they were hacked again not too long ago. Maybe last year? It happens more than it should.
 
I get the moving to 'off topic' but users should be aware of what happened with the site, whether it was a hack or just broken code from vastly outdated software. Would hate to see someone get malware from download links or ad links, due to inadequate house cleaning.

Just my opinion. Carry on.
 
So did anybody get a weird email from ‘T4R.org’. If this kind of shit continues I’m out. Kind of ridiculous. If this is legit I’ll apologize and delete this but it doesn’t look legit at all. The only emails I’ve ever gotten from here is notifications or account setup emails.

Sorry [MENTION=1857]fourwd1[/MENTION] I’m on my phone and it didn’t show up that way
 
Last edited:
Yep. You can read my posts here for more info
http://www.toyota-4runner.org/4th-gen-t4rs/265989-computer-glitch-hacked.html
 
Things are not fixed yet as of this post.
 

Attachments

  • T4R Forum issues.jpg
    T4R Forum issues.jpg
    55.6 KB · Views: 279
Status
Not open for further replies.

Members online

No members online now.
Total: 321 (members: 0, guests: 321)

Forum statistics

Threads
278,306
Messages
3,554,045
Members
248,016
Latest member
Advally Service

Share this page

Trending content

Back
Top