Has this forum been hacked !?!

[bmdj]

Hi just tried going to the main page forum and its saying that the site has been hacked by some indian fella, Neo hacker, or something.. If it has are my personal details such as email and passwords protected?

[Excalibur]

Hi just tried going to the main page forum and its saying that the site has been hacked by some indian fella, Neo hacker, or something.. If it has are my personal details such as email and passwords protected?

It would appear so. Funnily enough, the forum itself seems to be working fine. I'll pass this on to Higher Authority.

[Marc J]

http://thehackernews.com/2013/09/major-vbulletin-based-websites-are.html


If you currently use an older version of vBulletin on your website, you might be opening up your site to an attack as some serious security vulnerabilities, which allows hackers to access your hosting admin panel.

[bmdj]

The old http://forum.talkdj.net/ forum still looks up and running but has been abandonded by its members for a few months now!, althought that site doesnt use the vbulletin package. I think a few members are on here actually!

[cdkdisco]

Had the same problem as BMDJ when logged on. Anyone else?
According to Hackers News are advised to update VBulletin ???? Is that the way to sort this out ?
Using a Macbook Pro and dont where VBulletin is on it:confused:

[cdkdisco]

Thats a relief. Just off the phone to Apple. Info on my laptop should be fine.
This site has been hacked and advised to wait til admin sort it out.
Over to you,guys.

[SC Events]

Using a Macbook Pro and dont where VBulletin is on it:confused:

vBulletin is the forum software, not a program on your PC or Mac...

[ukpartydj]

Looks like Yaser Ranjha has hacked it now... shame because I was enjoying the Neo-hacker's music!

[Marc J]

XenForo FTW (http://xenforo.com/) :)

[lazersounds]

finally worked out how to get in after bypassing the home screen, straight into a saved history thread.

Looking at Marcs link, it appears they have had access to other forums emails and passwords, from the pictures, but ive not been spammed to death yet so fingers crossed they are not using them.

Dunno how these things work but i'm assuming our paypal details are safe for those who support the forum? :)

[paulg]

Doesn't look good... any of the moderators care to let us know if there are any security threats associated with this?

[Shaun]

I don't have any update yet, sorry. Richie is still working on the issue. We'll post updates on the MDD facebook page when we know more. As far as I'm aware there are no user security issues.

It's just the waiting game until I hear more. Sorry for the inconvenience.

[lazersounds]

Do you have a link? Been searching on Facebook all day with no luck lol

[DazzyD]

http://thehackernews.com/2013/09/major-vbulletin-based-websites-are.html

Are we due an upgrade then, Marc?


finally worked out how to get in after bypassing the home screen, straight into a saved history thread.

Looking at Marcs link, it appears they have had access to other forums emails and passwords, from the pictures, but ive not been spammed to death yet so fingers crossed they are not using them.

Dunno how these things work but i'm assuming our paypal details are safe for those who support the forum? :)

and


Doesn't look good... any of the moderators care to let us know if there are any security threats associated with this?

I've been looking in to the "work" of Mr (or Mrs or Miss!) Neo and it would appear his hacker niche is "defacement" attacks (hacking a website to change the home page, make a political statement, etc) which we tend to call a PITA (Pain In The (ahem) Behind!) attack rather than anything truly malicious. His motto seems to be "We came and leave peacefully" and many of the hacked sites I've looked at (can't find his FB page, though??) seem to have political motivation. He seems to be very similar in style to the famous Syrian Electronic Army (although it is widely thought that they can go a lot further than "mischief"). As a politically-motivated hacker, I'd be very surprised if he is also a thief. Hackers who steal details (logins, personal data, financial info, etc) are highly unlikely to leave their tag behind as this would make it much easier for them to be caught. Theives tend to be in and out without much disturbance to increase their chances of getting away with it.

The Neo Hackers Group consider themselves to be "white hat" hackers which means they seek out vulnerbilities in systems for good reasons such getting loopholes closed or fixed to make hacking attempts from "black hat" hackers much harder and, therefore, less likely. White Hat hackers tend to get themselves jobs with security or IT companies who will happily pay them to seek out these weak spots before the bad hackers do. Black Hat hackers are the exact opposite. They hack to steal, spread malware, infect systems, bring IT infracture to it's knees, etc. They are the bad ones and, if caught, are likely to be sentenced to lengthy prison sentences rather than secure a well paid job! In the middle, we have "Grey Hat" hackers. Grey Hats are the people who aren't particularly clever enough to cause destruction or fear or steal highly sensitive data or, potentially, money. They are also not that hot that they can find vulnerabilities before anyone else. They're a bit like the naughty schoolboy who likes to rock the boat a little and plays the clown in front of his friends. They do this primarily by "defacement" which usually means replacing a webpage with one of their own or a tag or something similar. Whereas White Hats and Black Hats ususally want to remain discreet and under the radar, to reduce their risk of getting caught, Grey Hats revel in the attention they can get from their peers by having their tag on a high-profile website home page. It's a very cheeky thing to do but often it's little more than an annoyance. And I think our Neo fits in to this group. But, then again, he's bringing the vulnerabilities to people's attention through his blog so maybe he's sort of White Hat after all?? :daft:

[leelive]

Hope you can sort this soon as I need my forum fix.
Lee

[Marc J]

Are we due an upgrade then, Marc?

I'd say overdue, or time to switch software completely (see my earlier link to XenForo (http://www.xenforo.com)).

vBulletin has been going downhill rapidly for some time now. The only reason to hang off from using XenForo previously was the court case with vBulletin, but that's has now been resolved...£140 gets you a XenForo license and it has an import from vBulletin feature.

IMHO.

[Cowlinn]

Obviously some idiots cause some issues over at the MDD - it's only /forum.php that's affected. Anyone else here? You can still use the forum by going to another page you have saved in your history.

[lazersounds]

There is another thread on this lol, i don't think many know how to get round it as only a handful of us are about on here still :)

[Excalibur]

There is another thread on this lol, i don't think many know how to get round it as only a handful of us are about on here still :)

More than a handful, I suspect. I've seen quite a few names online.

[lazersounds]

More than a handful, I suspect. I've seen quite a few names online.

Oh thats good, just a pain in the rear with that on the front page :)

[Daryll]

Still here....................:p

[lazersounds]

ooo the forum looks a bit more modern :D looks like its got a upgrade:)

Home page seems to be back too :)

[DazzyD]

ooo the forum looks a bit more modern :D looks like its got a upgrade:)

Home page seems to be back too :)

I don't think it's been upgraded. I just think it's been reset to it's VBulletin original formatting. The "Mobile Disco Directory" formatting appears to be missing and this is evident from the forum title which just says "VBulletin"! I'm sure correct formatting will be restored soon! Richie!! Ri..chie! RICHIE!!!! ;)

[Marc J]

The mobile style is still showing as hacked...

[Shaun]

The mobile style is still showing as hacked...

Cheers. Will ask Richie to look into it. I've disabled the mobile site for the time being.