Major Forum Hack

[Gasol_The_Great]

First topic message reminder :

Today, a forum of which I was staff on was hacked. It started yesterday when my account (a packager's account) was hacked and used to delete all of the content in a forum.

And today, a moderator and possibly an Administrator's accounts were hacked leading to the deletion of ALL content.

This was BY FAR a small forum. Over 500 members considered it home, and they had posted a combined total of over 50,000 posts all of which are now gone.

http://www.advertisehotspot.com/forum.htm

Im sorry Forumotion, but your security is unacceptable. Anyone can hack forumotion forums at any time. It is honestly terrible. You need to pick up the slack. Seriously.

~Gasol

[Gasol_The_Great]

Well the forum has been forced to shut down because of hackers, and Typlo still hasn't come around to help us, so I would most definitely conclude that support is still needed here.

So please, do not lock this at this point.

[Darren1]

Hi,

Well the forum has been forced to shut down because of hackers, and Typlo still hasn't come around to help us, so I would most definitely conclude that support is still needed here.

So please, do not lock this at this point.

Typlo didn't come online last night yesterday for an unkown reason.
Typlo is also a busy man whom has set his account to hidden

[Gasol_The_Great]

Yes, I am aware that he is busy. Im just hoping he responds soon because AH can essentially do nothing until a response from him is given.

[Darren1]

If you need a new password both MrMario & Luky can assign you a new one.

Unfortunately because today is Saturday, thus a weekend, Typlo most likely won't be online, so he won't be around until Monday.
Gizmo came online last night as the representative from the company

[Gasol_The_Great]

Man, are Gizmo and Typlo the only two representatives for Forumotion?

You'd think with a company of this size they would have quite a few highest ranking officials...

[Darren1]

Typlo is the main lesion, Gizmo is one of the Co-Founders of ForuMotion.
French is the primary language of the company, thus having the majority of officials.
It is rare that someone from the company works on a weekend, so it is unlikely anyone will pop on in until monday

[identityproof]

Alright guys! Its Tayne and Oliver who hacked AH. I found out from Evan, a ex member of AH. Tayne told Evan that he hacked AH.

We had a chat on Facebook.

[micro1000]

OK i am posting this on behalf of Cafetin one of ah's admin.

I have told you guys 2 days ago that it was oliver and tayne. i was the only one who they didnt ban from the chatbox and they told me who they are.
Also, Joel, I warned you not to unban any hacked accounts (btw, mine was not hacked. i dont know who started that gossip, but it is not true),
also once you restored the forum to a previous date, the passwords and permissions are restored too to that date.
Thats why i told you to ban those accounts and leave them alone right after the restoration, or at least change their passwords immediately.
Delete all "one person" hidden groups cause that was one of the rasons we were unable to lose our moderating powers. we tried to "quit" our rank but our individual permissions were still intact with the power of moderation.

[Gasol_The_Great]

So does anyone know anything about Oliver and Tayne? Is there any way to stop them from doing to this to another forum?

[LostLegend]

Please excuse me.

[Gasol_The_Great]

Oh man, Oliver and Tayne just hacked/stole mine and Martin's advertising forum

It wasn't forumotion based though...

DANG!!!

[markipjr15]

We need to find out there ips and call there ISP's and ban them from the internet and ban their IP Address's from all of our sites

[Gasol_The_Great]

If Im not mistaken, what they are doing is actually against the law.

Is there any way we could possibly bring law enforcement into this?

[markipjr15]

I dont think we can but if we find these IP addresses we can report them to Law Enforcement and Bring these two to Justice.

[Gasol_The_Great]

Forumotion, isnt there ANY way you guys can try to trace the IPs? Check the databases or something!

[markipjr15]

Gasol...The only way for forumotion to find out the ip address is if the owner of the board runs a IP checker and sends the ip address to typlo

[Gasol_The_Great]

So IP addresses aren't logged in the FM database? I thought they were.

[MrMario]

	Support!
Forumotion can check anything they want in on the servers Forumotion has all the info about these guys since day 1. There isn't much of what we can do right now so wait till Monday when Typlo get back.

[Rok]

Lol, what's that Mario? ^

I kinda know how Tayne/Oliver got into your forum. It's either one your administrators were talking to Tayne/Oliver and must of, unawarely, given away their password; or, one of you guys have an insecure email address such as Hotmail or Live, and Tayne/Oliver hacked into it. The best you can do right now is just construct a backup.

[Gasol_The_Great]

Well its somewhat of a fuzzy story, but apparently, no Administrators had their accounts hacked. It was only mine (a Packager) and then the next day a Moderator's account.

I've never given anyone my password though and it was fairly secure, and my email account is apparently untouched.

Im pretty sure they're using some sort of password decoding software...

[Neoroify]

If you seriously, really need help about having a high affective password long, complicated and remember-able one read the quotation below.

Instructions:
NUMBER ONE - For NON-English Languages:

Simply, type your password by using your language while using English Keyboard language
But... HOW?!: Your keyboard is an English/(Your Language) keyboard, has A,B,C,D... and your language's letters like: , you will type a word, street address, or a name in your language same time as an English language.
e.g: (in arabic) - lw'tn (in english)
Got it now? so.. your keyboard has as a letter but infact the key types "L" instead of because you're using English font while typing BASED on your keyboard so the result will be "lw'tn" - This will be easy to remember, and it is very complicated and is not known at all.

So what you've got to do is pick an address name which you remember in your own language and have your computer's language set to "English (United States)" and type considering that you're typing in your own language while you're typing in English.
e.g: ;(in arabic) - l]dkm6h;j,fv(in english) - See how complicated it is? tho it is not complicated for you! Because you think you're typing in your own language while you're actually typing English on your keyboard.

____________________________________________________________________


NUMBER TWO - For English-Characterized languages:
ENGLISH-Charactered languages can use a reverse typo, you can train yourself typing in reverse for your password only and it will be easy for you to remember without any complications, e.g: astrongpasswordlongone (original) enognoldrowssapgnrotsa (reverse #1) / agnortsdrowssapgnoleno (reverse #2)

Reverse #2 is hard and complicated, when you train yourself typing your password in that way you will remember it easily just like your name.
Anyhow some languages keyboard's has a character on a different key, e.g: a (french) is located at b (english) AND c (deutsch) is located at d (english) - This is a false example but is true and can be used.

____________________________________________________________________


NUMBER THREE - Letters & Numbers & Case Sensitivity Combination:
This is a third instructive and a very good way to protect yourself, is to combine letters. numbers and case sensitivity all in one word, This is a good way for who are not able to use NUMBER ONE and NUMBER TWO instructions. You will have to choose your secondary password with a bunch of numbers and capped letters combining them with each other to create a unique strong password by using your name, address or phone number all together
e.g: name: moustafasaeed, phone: 0114903390 (normal), m0o1u1s4t9a0f3a3s9a0eed (combined #1) / m0ust4f4s433d (combined #2) / m011ous490ta33fa90saeed (combined #1.2)

You can even invent the way you want its all your decision.

____________________________________________________________________


I hope this is not complicated for you to understand, tho it is the easiest, safest and best way to create your secondary password and/or primary.

Regards.

[Darren1]

Lol, what's that Mario? ^

I kinda know how Tayne/Oliver got into your forum. It's either one your administrators were talking to Tayne/Oliver and must of, unawarely, given away their password; or, one of you guys have an insecure email address such as Hotmail or Live, and Tayne/Oliver hacked into it. The best you can do right now is just construct a backup.

Not necessarily;

I know Oliver downloaded a tool that allows them to find DB exploits, and use them to his advantage, thus gaining entrance into the DB, and into your admin panel without a password, and I'm sure, the probability of a "back door"

They don't even have to talk to you to do that

Gasol, every action you make, every IP address you use, it's ALL logged in the FM DB, every single thing you do, every single IP address => ALL logged.
Guess what; Last I heard, Typlo was preparing a legal case against Tayne & Oliver, but that was quite a fair while ago, and I haven't asked if the case was going to continue or not for at-least 6 months




Darren.

[Gasol_The_Great]

Oh, well I hope it is...

These guys need to be punished!

[LostLegend]

I'm apparently banned - but some users are online? Isolated incident or all-non mod ban?

[Neoroify]

If you're seriously into this, Forumotion and/or the forum founder, you can contact ic3.gov by sending an application form to then with all informations you have, and they if they think it is as serious as you've stated above (the topic overall is about..) they will take the right action at the right time, As they will investigate for the informations you provided them.

Regards

[Avian]

I say we play outhack the fake-hackers-who-need-f*****-tools-just-to-hack.

[Gasol_The_Great]

Does anybody have any updates?

[Sanket]

Not Yet Gasol, Typlo didn't come online yesterday for an unknown reason.

[micro1000]

When i go to ah i see it's restored.
But i also see my account online(but i can't log in there) so i guess it's the hacker again.

[Gasol_The_Great]

Thats odd... If its the hacker, why hasn't he deleted the posts this time?

Either way, we need to get your account straighted out, micro.