Author Topic: Hacked again..  (Read 12782 times)

0 Members and 1 Guest are viewing this topic.

Offline smokester

  • Administrator
  • Q
  • *
  • Posts: 14873
  • Gender: Male
  • Da mihi castitatem et continentiam, sed noli modo!
Re: Hacked again..
« Reply #30 on: February 05, 2013, 05:32:59 AM »
Either I'm going mad or some of the previously deleted hack files, reappeared.

MarkMonitor then got us temporarily shut down and saved the world in the process ::)
Don't put off until tomorrow, what you can put off until the day after.

There is an exception to every rule, apart from this one.

Offline xtopave

  • Site Modette
  • Q
  • *
  • Posts: 28876
  • Gender: Female
Re: Hacked again..
« Reply #31 on: February 05, 2013, 06:34:25 AM »
I've been scared for the last half hour or so when I got "Forbidden".  :)

Offline smokester

  • Administrator
  • Q
  • *
  • Posts: 14873
  • Gender: Male
  • Da mihi castitatem et continentiam, sed noli modo!
Re: Hacked again..
« Reply #32 on: February 05, 2013, 07:10:41 AM »
I've been scared for the last half hour or so when I got "Forbidden".  :)

For me it was "ACCOUNT SUSPENDED" which was odd as I do the suspendin' and stuff for individual accounts.  Then I read my mail which included the MarkMonitor request to the host to shut us down.

I am second guessing myself now but I am sure I checked every single file individually and deleted all that shouldn't have be there.  I also checked the code of files that had been modified post the SMF installation to check that they hadn't been altered in some way.

It may be another conspiracy.
Don't put off until tomorrow, what you can put off until the day after.

There is an exception to every rule, apart from this one.

Offline ohcheap1

  • Q
  • *
  • Posts: 19080
  • Gender: Female
Re: Hacked again..
« Reply #33 on: February 05, 2013, 07:53:18 AM »
Got an IM from Goldie and he was getting the "ACCOUNT SUSPENDED" message too.

Offline mishca09

  • Q
  • *
  • Posts: 11386
Re: Hacked again..
« Reply #34 on: February 05, 2013, 08:54:45 AM »
I got acct suspeneded @ like 5am and then later in the morning got the forbidden message.
Every seems to be okay now, thank goodness.

Offline Autumn

  • Account on hold
  • Cro-Magnon
  • ****
  • Posts: 648
  • Gender: Female
  • No regrets
Re: Hacked again..
« Reply #35 on: February 05, 2013, 09:13:19 AM »
^same for me. I gotta say, I was freaking out. I already lost the noid, I can't lose you guys too!

Offline smokester

  • Administrator
  • Q
  • *
  • Posts: 14873
  • Gender: Male
  • Da mihi castitatem et continentiam, sed noli modo!
Re: Hacked again..
« Reply #36 on: February 05, 2013, 09:22:15 AM »
For everyone's interest, we cannot disappear or be shut down for very long as I essentially control the domain (as a reseller). I could have re-activated the site myself this morning but seeing as it was a serious request from the real authorities, I thought it better to liaise with the host to ensure they were fully aware of the current situation and could check the site files themselves.

If we are ever offline/suspended/giving you errors, it shouldn't take very long for me to sort things out - as long as I haven't had too many beers.
Don't put off until tomorrow, what you can put off until the day after.

There is an exception to every rule, apart from this one.

Offline xtopave

  • Site Modette
  • Q
  • *
  • Posts: 28876
  • Gender: Female
Re: Hacked again..
« Reply #37 on: February 05, 2013, 10:28:48 AM »
as long as I haven't had too many beers.

Aaaaand we're doomed.  :D

Offline smokester

  • Administrator
  • Q
  • *
  • Posts: 14873
  • Gender: Male
  • Da mihi castitatem et continentiam, sed noli modo!
Re: Hacked again..
« Reply #38 on: February 05, 2013, 02:06:14 PM »
I've just realised that our legitimate smileys have now gone.  That was the folder that had the hidden poo in it and why they may have been harder to detect (although I'm sure I did).  I'll get 'em back asap.
Don't put off until tomorrow, what you can put off until the day after.

There is an exception to every rule, apart from this one.

Offline dweez

  • Global Moderator
  • Q
  • *
  • Posts: 11401
  • Gender: Male
  • Rebel Mod
Re: Hacked again..
« Reply #39 on: February 05, 2013, 07:07:24 PM »
smokester, did you get an e-mail from SMF on Feb. 4th titled "SMF 2.0.4 and 1.1.18 critical security patches released"?  Maybe it was a new exploit that nailed us?  Let me know if you need me to forward it to you.
--dweez

Offline 6pairsofshoes

  • Human
  • *****
  • Posts: 2216
Re: Hacked again..
« Reply #40 on: February 05, 2013, 09:32:22 PM »
I missed the excitement, but I'm glad you have the matter well in hand.  Thanks.

Offline goldshirt*9

  • Super Hero
  • *******
  • Posts: 6430
  • Gender: Male
  • Who yous looking ats
Re: Hacked again..
« Reply #41 on: February 06, 2013, 12:27:48 AM »
Missed all the "fun" it seems.
glad its all ok now. phew

Offline smokester

  • Administrator
  • Q
  • *
  • Posts: 14873
  • Gender: Male
  • Da mihi castitatem et continentiam, sed noli modo!
Re: Hacked again..
« Reply #42 on: February 06, 2013, 02:42:34 AM »
smokester, did you get an e-mail from SMF on Feb. 4th titled "SMF 2.0.4 and 1.1.18 critical security patches released"?  Maybe it was a new exploit that nailed us?  Let me know if you need me to forward it to you.

I may have but haven't checked the email attached to my SMF account this year.

When I had to replace the smileys folder last night, I did so using an archive I made of the site files after the hack last month or whenever it was.  The phishing files were not in that but were yesterday after the suspension, so someone is still meddling by the looks of it.  I need to change all the passwords again especially that of the database so if you all bump into the maintenance page sometime in the near future, you'll know what's happening.
Don't put off until tomorrow, what you can put off until the day after.

There is an exception to every rule, apart from this one.

Offline townie2

  • Neandertal
  • ***
  • Posts: 468
  • Gender: Male
Re: Hacked again..
« Reply #43 on: February 06, 2013, 06:07:12 PM »
i was getting the "forbidden" message too. anybody piss off Anonymous?  ;D

Offline smokester

  • Administrator
  • Q
  • *
  • Posts: 14873
  • Gender: Male
  • Da mihi castitatem et continentiam, sed noli modo!
Re: Hacked again..
« Reply #44 on: February 07, 2013, 08:45:43 AM »
i was getting the "forbidden" message too. anybody piss off Anonymous?  ;D

That would have been me.
Don't put off until tomorrow, what you can put off until the day after.

There is an exception to every rule, apart from this one.