The forum of the forums
Would you like to react to this message? Create an account in a few clicks or log in to continue.

(Only Topic)Possible hack, Need assistance/Pop up message

+4
Jasonlim
Jophy
sign da tits
dbagnall
8 posters

Go down

Important (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall Sun 3 Apr - 21:14

Every user on my forum is reciving the message in the screenshot, I have no idea what it is. I have not changed anyting in my admin pannel or spammed anyone

My forum is http://suicidegamers.realmsn.com/
or http://suicidegamers.co.uk/

(Only Topic)Possible hack, Need assistance/Pop up message Hack10

The site Hosted.3rdfleet.com is noting to do with us

Made an Only Topic ~ Joph25


Last edited by dbagnall on Mon 4 Apr - 0:24; edited 1 time in total
avatar
dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by sign da tits Sun 3 Apr - 21:23

dbagnall wrote:Every user on my forum is reciving the message in the screenshot, I have no idea what it is. I have not changed anyting in my admin pannel or spammed anyone

(Only Topic)Possible hack, Need assistance/Pop up message Hack10

The site Hosted.3rdfleet.com is noting to do with us
Well, I'd get some good security or detection of malware and removal time to hook you up with some things.

http://www.microsoft.com/security/pc-security/malware-removal.aspx

http://www.microsoft.com/en-gb/security_essentials/default.aspx
sign da tits
sign da tits
Forumember

Male Posts : 236
Reputation : 30
Language : British English, AutoIt
Location : England!

http://www.devforumz.com/

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jophy Mon 4 Apr - 6:17

Hello,

I will report the problem to Typlo. Please be patient. Thanks.
Jophy
Jophy
ForumGuru

Male Posts : 17924
Reputation : 836
Language : English
Location : Somewhere

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jasonlim Mon 4 Apr - 6:56

Hi, I am the admin of www.fiestaclubmalaysia.com. I am getting the exact same error too. Is our forums being hacked or otherwise? Please assist. Thank you.

Jason Lim
Jasonlim
Jasonlim
New Member

Posts : 8
Reputation : 0
Language : English

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jophy Mon 4 Apr - 14:19

I'd made this topic an (Only Topic), please report your problems here so in case Typlo looks on this thread, he can take a look at your forums. Thanks.
Jophy
Jophy
ForumGuru

Male Posts : 17924
Reputation : 836
Language : English
Location : Somewhere

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall Mon 4 Apr - 14:36

Joph25 wrote:I'd made this topic an (Only Topic), please report your problems here so in case Typlo looks on this thread, he can take a look at your forums. Thanks.

Thanks, Im quite sure its the theme we are all using, I have now removed it from mine and there popup has gone, but i still would like to see this fixed as i want to still use that theme
avatar
dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Sanket Mon 4 Apr - 14:37

I don't seem to be getting that error. Is it still happening? or happening on a specific browser?
Sanket
Sanket
ForumGuru

Male Posts : 48766
Reputation : 2830
Language : English
Location : Mumbai

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall Mon 4 Apr - 14:40

Sanket wrote:I don't seem to be getting that error. Is it still happening? or happening on a specific browser?

Yep still got that problem, im using IE9. I also get the popup on my iPhone
avatar
dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Sanket Mon 4 Apr - 14:44

Did you try firefox?
Sanket
Sanket
ForumGuru

Male Posts : 48766
Reputation : 2830
Language : English
Location : Mumbai

Back to top Go down

Important I May Have The Source Of This Annoyance

Post by MADBIKER1960 Mon 4 Apr - 14:55

Hello;

My sites:
http://www.nfsworldunited.com/
http://www.wurc4it.com/

as well have been infected with these pop-ups and when I contacted the Administrator of the website that it allegedly belongs to he has informed me that one of his members has a Forumotion based website of his own.

Somehow they were linked and were on good terms but they had a fallout.
After their fallout, the subdomain was blocked and denied access to the main site with this popup.

The address of that site is http://stonlinerp.forum-motion.com/

I hope this helps out the persons in charge of getting rid of this popup, I wonder how many more Forumotion sites have been infected with it.

It is a nuisance, more then anything.

DJMB1960
I Listen to Blade Radio.
What are you listening to?
MADBIKER1960
MADBIKER1960
Forumember

Male Posts : 97
Reputation : 0
Language : English
Location : Toronto, Ontario. CANADA

http://nfsworldcommunity.canadian-forum.com/

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by dbagnall Mon 4 Apr - 15:00

I dont have firefox, but i just tested with google chrome. The problem seems to be gone on all browsers i have tested
avatar
dbagnall
New Member

Posts : 8
Reputation : 0
Language : Manchester, United Kingdom

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by MrMario Mon 4 Apr - 15:36

Seeing as your all have the same theme, that someone installed a code in that theme to do this, when they created it. Better off changing it.
MrMario
MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1839
Language : test

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by MADBIKER1960 Mon 4 Apr - 16:33

Hello;

Here is the response I got from the owner of the site in question:

Hey there,

I am the owner of 3rdfleet.com and aswell Team Leader of at LaterFire. I can assure you this wasnt meant to be harm to any site.

We simply blocked one site that was using our domain and serverspace. The site we have blocked has been hosted on a forum motion webserver. Sadly it appears all sites hosted there have been affected by our domain-block. As I said. I assure you we meant no harm with this, nor is it really our fault.

To me it appears like a bug, when you block one site you block all. The Forum Motion Admins should do a little digging in this matter. Until that, we have removed the block from the specific site so it shouldnt affect any others anymore.

Please have in mind this was no virus or any malware. Its just bad coding from Forum Motion in that case. Thats why I never use thoose Free-Providers. But thats just my opinion.

If you have any further Problems you can contact me:

swing@laterfire.com | cris.carter@3rdfleet.com


With kind regards

And it appears that the pop up has disappeared.

Perhaps the admins can look into this problem and why it worked the way it did.

DJMB1960
MADBIKER1960
MADBIKER1960
Forumember

Male Posts : 97
Reputation : 0
Language : English
Location : Toronto, Ontario. CANADA

http://nfsworldcommunity.canadian-forum.com/

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Jophy Tue 5 Apr - 1:18

Is it sorted for everyone else?
Jophy
Jophy
ForumGuru

Male Posts : 17924
Reputation : 836
Language : English
Location : Somewhere

Back to top Go down

Important Re: (Only Topic)Possible hack, Need assistance/Pop up message

Post by Crystal Dayra Tue 5 Apr - 1:39

Greetings, I am Crystal Dayra - Server Admin for Hosted.3rdfleet.com and close friend of Swing/Cris Carter as quoted above.

First and Foremost please allow me to clarify a mis-statement by Cris that is quoted above.

The problem is not caused by Forum Motion or the forums themselves, the problem also is not a hack or bug in the system. Please allow me to explain

The problem was actually caused by these themes (maybe others but I haven't confirmed any others yet)

http://en.hitskin.com/search-a-skin/assassins-creed-167473.htm
http://en.hitskin.com/search-a-skin/bluey-design-167451.htm

The problem itself is that these themes have a hot-link in them so that they will load an image directly from the hosted.3rdfleet.com server. This image to be exact;

http://hosted.3rdfleet.com/storp/forums/Themes/Krilliunsmf2/images/theme/backdrop.png

The problem occurred when I password protected the directory on my server which held that file, resulting in any website attempting to load it to have a username and password pop-up.

In a normal situation me password protecting my data shouldn't have any effect on anything but the data folder on my server, and that if it wasn't for the hot-linking to my server your forums would've never been effected. So its important to note that this was not done intensionally and ultimately is not a problem on our end.

Please also note that I nor anyone from 3rdfleet.com is responsible for those theme's as such we imagine that the hot-link to our site was likely an oversight on the creators part, as he was probably using the images from our server to recreate the look of a theme contained there or something along those lines.

At this time, even tho this hot-linking is resulting in a fair amount of bandwidth usage as the above themes have proved to be fairly popular, we've opted to remove the password protection and allow this hot-linking to continue for the time being until the creator can get his theme updated and fixed as the fix should be fairly simple.

In the mean time I've requested that the 2 theme's I've identified as using image hot-links from my server be taken down to prevent the issue from spreading to more forums.

Reference Post: https://help.forumotion.com/t88294-requesting-the-removal-of-a-skin

I also recommend anyone currently using these themes to look for another suitable match if possible in case the theme creator choose's not to update his theme in the future.

If anyone has any questions, comments, suggestions, or concerns feel free to contact me at Crystal.Dayra@3rdfleet.com and I will do my best to accommodate you.
avatar
Crystal Dayra
New Member

Posts : 4
Reputation : 0
Language : Engish

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum