Multiple YiiMP pools hacked, this is what we know so far.. - page 3.

crackfoo

legendary

Activity: 3556

Merit: 1126

Quote from: gorkemg on September 11, 2017, 02:10:07 AM

Quote from: crackfoo on September 10, 2017, 02:34:31 PM

We're back online with the frontend and api.

Frontend isn't working right now.
Miners still conntected to stratum but there is no payment after 6 six hours ?

Somethings going wrong again ?

it's working for me... whats the error you get and what currency are you still waiting for payments?

gorkemg

newbie

Activity: 29

Merit: 0

Quote from: crackfoo on September 10, 2017, 02:34:31 PM

We're back online with the frontend and api.

Frontend isn't working right now.
Miners still conntected to stratum but there is no payment after 6 six hours ?

Somethings going wrong again ?

enkayz

full member

Activity: 298

Merit: 100

hashbag.cc

hashbag also back online.

have made all the payments to miners that were stolen/delayed, cost me some of my own funds but at least this time I had spare funds for it. servers locked down much harder, hopefully this doesn't happen again..

i don't really charge much fees but maybe I should begin moving what I -do- get out of the pool Tongue

lyolyalya

sr. member

Activity: 455

Merit: 250

Quote from: doktor83 on September 11, 2017, 12:29:38 AM

Quote from: crackfoo on September 10, 2017, 06:26:08 PM

Quote from: bney on September 10, 2017, 05:38:39 PM

Looks like a few minor things missing. icons, and coins mined on the wallet display screen

Hrmm seem fine on my side... I'll check into it more I'm back on a terminal.

only the top menu shows, clicking the menu links does nothing.

confirmed=)

doktor83

hero member

Activity: 2548

Merit: 626

Quote from: crackfoo on September 10, 2017, 06:26:08 PM

Quote from: bney on September 10, 2017, 05:38:39 PM

Looks like a few minor things missing. icons, and coins mined on the wallet display screen

Hrmm seem fine on my side... I'll check into it more I'm back on a terminal.

only the top menu shows, clicking the menu links does nothing.

okane818

legendary

Activity: 1176

Merit: 1000

I think there is a manipulation inside.
I mean the one making to this is only the insider.

Making reason to cover. That is an old reason to believe. NOT NEW!

That's it.

Thank you.

bney

full member

Activity: 333

Merit: 100

All looking good on Zpool. Thanks for the hard work.

tazmako

full member

Activity: 350

Merit: 100

XDNA - Most innovative cryptocurrency in 2018

How long for all pool got fix?

crackfoo

legendary

Activity: 3556

Merit: 1126

Quote from: bney on September 10, 2017, 05:38:39 PM

Looks like a few minor things missing. icons, and coins mined on the wallet display screen

Hrmm seem fine on my side... I'll check into it more I'm back on a terminal.

bney

full member

Activity: 333

Merit: 100

Looks like a few minor things missing. icons, and coins mined on the wallet display screen

crackfoo

legendary

Activity: 3556

Merit: 1126

We're back online with the frontend and api.

bney

full member

Activity: 333

Merit: 100

Appreciate the work you do. This has got to be costing you sleep and making your hair go grey

crackfoo

legendary

Activity: 3556

Merit: 1126

Quote from: Bulletdodger on September 10, 2017, 03:25:29 AM

Any news about zpool, I am still mining there, and receiving some payments...

no balances will end up not being paid or cleared. It's the risk of running a pool. This hack caused a major overload of work to do to update wallets and transfer balance from old to new. It doesn't help that two of my servers crashed a burned this week too so trying to rebuilding those as well. One still hasn't identified the cause, the other had the CacheCade SSD replaced yesterday. They'll all get caught up for payments, just patients is needed.

Hang in there,

Cheers

Decker

member

Activity: 121

Merit: 61

Have somebody recovered lds.php or logged the cookies payload used in php object injection by attackers through unserialize() funcs? Interesting to understand this attack vector more completely.

crombiecrunch

member

Activity: 98

Merit: 10

So I ran wapiti again on my site after loading the last code from the githib. The XSS vulnerability still shows.

But when I run wapiti against some of the other sites, some show the vulnerability and some dont.

There hasn't been any more code updates though. Could we get a solution shared?

Bulletdodger

sr. member

Activity: 337

Merit: 250

Any news about zpool, I am still mining there, and receiving some payments...

xtraelv

legendary

Activity: 1288

Merit: 1926

฿ear ride on the rainbow slide

Could it be a repeat modified version of the BGP attacks that took place in 2014 ? http://www.zdnet.com/article/hacker-hijacks-isps-steals-83000-from-bitcoin-mining-pools/

CapeTownMinter

member

Activity: 87

Merit: 10

yea i think my Yiimp bsd is safe....but i may have lost BSD and FTC on zpool .... i was waiting for currency to be exchanged and paid.

scryptr

legendary

Activity: 1797

Merit: 1028

YIIMP HAS TRACED SOME WALLET ADDRESSES--

The YIIMP pool maintained by tpruvot, the author of the YIIMP software, has left a trail to certain withdrawals by theft and subsequent deposits. If the evidence of withdrawal by theft is provided to exchange management, there is a chance of recovery.

I did not loose any BSD mined on YIIMP. Tpruvot likely reimbursed miners from his own pocket. --scryptr

CapeTownMinter

member

Activity: 87

Merit: 10

looks like i lost about 26 bitsend and 50 featherCoin from Zpool and about 8 bitsend from yiimp ... about 2 day's and half worth of mining on my small rig Angry

Topic: Multiple YiiMP pools hacked, this is what we know so far.. - page 3. (Read 15725 times)