forum hacked and threated to lose site unless i pay

[tdbnz]

hello there

I own this site http://warezgeeks.com

and my site been hacked he says I have to pay him $150 or he will take my site down

visit the website it comes up with the message threaten my the founder

site still access eg http://warezgeeks.com/forum

please help me help me please

my email and Facebook are secure I get emails of every login on Facebook

please help this hacker is bad

I will go to police if my site goes down

cheers
tdbnz

[SLGray]

Can you log onto your forum?

[tdbnz]

yes I can he says my computer is logged any way it a school computer he knows my email address and Facebook those accounts have been secured I get email from Facebook on any login's etc.

If I do not pay him he going to take my site down I will be sad if my site goes

I can all ways restore site if need to

tdbnz

[SLGray]

Does he/she have access to the founder account?

[tdbnz]

do not know he a hacker I changed my password straight away since I saw changed home page on my site he a hacker

he damaged my site before I not paying him money I do not know him he from the uk

did you read the message on the home page of my site http://warezgeeks.com

I never set that there and there no traces left of the hacker

[SLGray]

Have you did a search to see if any new codes have been add to cause this?

[tdbnz]

just set up a html page for site home page with the info

I going to lose my website if I do not pay up his $150 dollars

did you read the homepage message he set on my website

[SLGray]

I do not see a homepage message.

[tdbnz]

go to http://warezgeeks.com

you will see the message

[SLGray]

That is not the homepage message. The person who has done this must have add something to your forum to cause the redirect. Check messages, announcements, homepage message, signatures, avatars, etc.

[tdbnz]

no it a html set as the home page

[SLGray]

So someone with access to the administration panel created this page?

[tdbnz]

he hacked my site and put that up there do not know how how he did it
all the account he made i have baned and ip banned him but he still can access the site i might lose my site if i do not pay up
he destoryed my site before by hacking into it do not know how he doing it but i hate him
his name jack and is live in the uk

well he hacked my account even though i changed password every 2 weeks and i never give out my password to my site

[SLGray]

A forum can not be hack, but an administrator account can be. If he has been in the administration panel that means he has access to an administrator account.

[tdbnz]

all the admins accounts have had there password changed

he hack again visit the html he created http://warezgeeks.com

he threaten me I going to lose my site
he a hacker there no trace of him in the admin panel

[Codyy]

Hello tdbnz,

I can understand the worry and struggle you are going through, as a some-what established forum owner, here on ForuMotion.

Firstly, could you please ensure to me that you know who all of your administrators are, that have access to the administration panel? The person who has done this, has access to an administrative account, that you have considered as an administrator.

I am getting this information from here: http://www.warezgeeks.com/g1-administrator

I am assuming you are headmaster admin, correct? Who is beastly and daktacallum? Are you knowledgeable of who these people are, and have requested that they change their passwords?

Ask them to log out of their accounts, and change the passwords again, using strategic keystrokes, such as symbols (!@#$%^&*) and numbers in their password. By them logging out of the accounts, this will close all open sessions.

May we have the email address of the PayPal address the user is requesting you pay it to? This information can help us pinpoint who the "hacker" is.

Cody

[SLGray]

Never post an email address on a public forum.

[Codyy]

Never post an email address on a public forum.

No offence SLGray, but the user is causing damage to one of your customers and I am simply trying to help them.

[SLGray]

Well you can send it in a private message.

[tdbnz]

hello this hacker is jack

his website is http://jhgamesforums.forumotion.co.uk/

I know every admin

i am headmaster admin the founder
datakacallum is a friend of mine i go to school with him
beastly is a friend but he over seas he witnessed the hacking before

I have pm you SLGray and Codyy with

the hackers email address's that he has signed up with on my site / paypal email address that is set up to recive the money

this hacker been banned and ip banned

[Codyy]

Do you have any previous affiliations with "Jack?"

Typically, a hacker will target a website in revenge for something that goes back to previous history. Did you maybe join his forum and ended up being banned from it? Or say something over a third party messenger and end up mad at each other?

All of these situations are possibilities to consider, as to why "Jack" is wanting to destroy your forum for monetary donations.

Codyy

[collinsexton]

He raised it to $300. Could he have replaced all of the HTML/JavaScript through the Admin Panel? And is it possible to restore his forum from the forum utilities?

[tdbnz]

I can remove the home page but lefted it

he use to be admin I never meet him then he started destroying my site I banned every account and ip address of him
no he just a hacker I wont rid of him I worried he might attack my forum again

it seems to be a while then he hacks I do not wont to donate money he a loser

mm my forum ok he just wants me to pay the money or else he will destroy my website

[Codyy]

tdbnz,

I'd like for you to do a few things for me. Go to General and then Security.

Find "Confirm password to administration access :" and set it to yes. Also, find "Disallow "Send by e-mail a new password" to administrators and moderators :" and set it to yes, as-well.

Also, look at those logs on that same page and see if you can find something about what user is changing these settings.

Codyy

[Ultron's Vision]

An easier solution is to completely disable HTML in your site, you can do so via Administration Panel -> General -> Messages and e-mails -> Configuration -> Allow HTML? No.

[kirk]

tdbnz,

I'd like for you to do a few things for me. Go to General and then Security.

Find "Confirm password to administration access :" and set it to yes. Also, find "Disallow "Send by e-mail a new password" to administrators and moderators :" and set it to yes, as-well.

Also, look at those logs on that same page and see if you can find something about what user is changing these settings.

Codyy

First thing do what Coddy has above, then remove all admins until further notice, go through your forums logs to see who has done what. Also keep any ip and other information you may have on this person. You will have to report this and the whole situation to your service provider and ask them what kind of steps you can take next. As far as your forum it seems to still be in tact.
http://www.warezgeeks.com/forum

Looks like the stupid message was just set as your home page, look in the logs to make sure another admin did not do this, Also change all your passes through your forums utilities.
Report this all to pay pal, give them screen shots and any other informations you can provide them to either block the pay pal account or inform you on what other legal actions you can take against them.. This is illegal, it is a type of blackmail,hacking and hijacking.very serious crime,

If for some reason he was able to kill the whole forum. forumotion could always get it back for you. However i strongly suggest you only have staff you can trust, and to change your pass to a complicated one along with setting everything like coddy has suggested above.

Other then that. Stick up for your self and tell him to buzz off, tell him to come here and try that bull with us and see how far he gets... LMAO

Oh you may want to close registrations or set it to where you have to activate new accounts first.And yeah remove all other admins only as a temporary precaution until all is sorted out.

An easier solution is to completely disable HTML in your site, you can do so via Administration Panel -> General -> Messages and e-mails -> Configuration -> Allow HTML? No.

it will not hurt to do this as well.

info added

see if this helps. For how to report this to pay pal

https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Help/general/TopQuestion4-outside

[tdbnz]

I just check the log on the forum

my admin beastly I think he been hacked as it says he edited html page when I do not believe it was him as he would not ask me for money etc.

I changed his password and I have emailed him it this can get serious

the password to admin is active so they can't access unless password

I can't report him to PayPal I can't find out how to

one admins is removed from admin and other password has been changed due to security and mailed him it and sent him pm on here as he got account on this site to

I think the hacker got a account on this forum he destroyed my forum before he might be active later today he overseas and he normally attacks weekdays
mainly I think



and disallow passwords to be sent for admins and mod etc etc

[Richard.]

Hey tdbnz, as i read throughout this topic i figure that the hacker has your "utils passowrd", all he has to do is go everytime u chnage ur pass and reset ur forum which will automatically change the password which corresponds to the date he had restored it. If you have da password to your utils you could do this, log in ur utils and scroll down to:

Direct connection to the Administration Panel put ur username and a password ( it has to be da account of the founder)

then scroll down to:
Remove the security 'Disallow to send a new password to administrators and moderators'
and choose yes remove it..
** keep in minde rememebr all da passwords you have chnaged, which would b good if you use a new one but the same on everywhere.

Hope this helps.

[tdbnz]

utiltes password I will try and see if it works it been ages since I been on it but I will try

I will change password for it and changed my pass on forum as well

[Richard.]

you can access the util with your forum adress as well, put your forumadress and den your password which you used first time you created the site, i dont see any way a minor from uk that could hack FM security, beacuse to be honest, FM has a good viarity of security.