Topic: About the recent server compromise - page 7. (Read 15325 times)

You'd probably be suprised by how easy some people can trick others into giving them sensitive information. I've seen it done on a much smaller scale and all it took was a little bit of confidence. There's also been reports over the years of simple techniques used against big companies and much more sensitive data.

Of course they can be reported to your email provider but blocking out the emails doesn't do much good for the forum to be able to do anything about it not that they could anyway as they likely wont be linked to accounts here.

Now I started receiving spam emails from maximeco******@gma and some vayne*****@gmail.com. Any way to report these emails or ban these users' accounts as they seem to be the hackers.

Thanks theymos, I have changed my password yesterday and also today... and I hope to be 'safe' (a big word) now .   XAU for his real identity, it is a lot of money.... and I do not think he is stupid (he made a soc. engir. attack... only a few people are able to do it).


PS: however good luck with the search.

Over the last four days attempts to log into the email address I use here have been up about 20% relative to the average 4-day period over the previous month. I do not use the same password I used here for anything else but for what it's worth I hope they burn every bit of comp time they've got trying to crack it.    

I've also gotten some very good spear-phishing recently, one of which took the "message from your ISP" thing to the next level by using the name/e-mail address of an actual real employee at my ISP, and another of which used an address that is held by a family member.  That's a lot more upsetting to me than the fake-login attempts.  

I have no idea whether the bump in activity has anything to do with the recent breach here.  But it's interesting.

Theymos: Good job.  I know exactly how hard it is keeping something up when the environment turns hostile, and these people saying this number of breaches is unacceptable - have no idea what it's like dealing with an "advanced, persistent, targeted threat."  The level of attacks and attempts something like this attracts is beyond what most ISP's are willing and able to deal with, and beyond a certain level of complexity all software leaks.   This forum having a public face means taking a lot of stuff head-on, and given that your up-time record is acually pretty awesome.

I used a 2024 character string though. Not the most reasonable password length eh? I was pretty surprised to see that there wasn't any warning or error message and that's why I came here to ask if there's any limit.

If anyone wants to change their IP address exposed in the hack, the method I just used was to edit the MAC ID that my modem sees, and rebooted everything. A new WAN IP was issued. Check https://whatismyip.com before and after this procedure.

Even if you have a dynamically-assigned IP, you will likely get the same one again, if all you do is reboot without changing your MAC ID.

Theymos please make the notice for changing the password more visible. Maybe bold it or put it in red. Right now I find it very easy to miss it.

No, the last characters are not cut off, at least not at any "reasonable" password length.  My password here is over 60 characters, and it still cares about whether the last character is entered. 

Check the second link , all the other adresses are available .
But yes you got a point . We still waiting for this new forum which should cost 1.5m dollar and I'am really thinking it's a lot more then it should cost . but ... Simple Machines is not that good but vBulletin is made by professionals I don't know why we aren't using that , and we can use like 100k $ max to Upgrade and Hire developpers and programmers to do the security stuff etc .
So I guess we just should wait for epochtalk and see how things goes It may be able to compeet the other forum softwares such vb,mybb etc ...

Theymos thank you for dealing with all this during a holiday weekend.   It sounds like a lot of work put in over this mess.

Also what I think is great of you is putting a good reward out there.  I thank you most for this.  I hope whoever did this someone knows and will turn them in for the reward.  Guess time will tell.  But I hope actionable information comes in.

Good work theymos glad u got the server shut down quickly!

LOL @ Never say

Not Smart Actually
Negative Security Agency
Nothing Secure Anymore
National in-Security Agenda

Totally agree.  According to the table,  my 16 random AZaz09  is effectively not going to be cracked by those black-hats any time soon.

It was a very tense login moment today to find out if I still had access to the account, must've been doubly so for those in a signature campaign.

Victory. 

No Secrets Allowed.
Never Say Akbar.

So many good variants.

No Such Agency?

LastPass is a good idea for generating passwords you don't need to remember. You'll need to remember one complex password but then it'll store any others you need. [Link] | [Link with referral ID which gives both of us 1 free month premium].

To also look at the other side, it's not the first time the forum gets attacked. The previous attacks were done with the intention to deface the website though, (probably) no attempt to steal information. This must be the first time someone attacks the sole forum with the intention of stealing user information.

Whoever claims theymos is not doing a great job with this forum should consider this forum is probably one of the most attacked ones because attackers potentially have so much to gain in the financial sense. Consider also that a lot of security expertise lurks around the forum. When you look at it this way, the amount of successful attacks is quite low, TBH. Keep up the good work, theymos.