Page 1 of 1

Hero6 visitors forum hacked

Posted: Sun Apr 23, 2006 5:16 am
by Swift
PHattiE wrote:I am considering remaking the hero6 visitor site. It has been hacked, and anyone who goes to the forums right now will get a virus.

Posted: Mon Apr 24, 2006 4:47 am
by Swift
Someone had hacked into the QFMG forums as well. Both seem to share similarites.

Both affect IE users who try to view the forums. This script downloads automatically when you access those boards using IE.

Both had forum members receiving emails claiming to be from the forums with the following message: "Please, help our forum - traffmoney.biz/dl/loadadv606", with a live link and to an exe. If you see such an email, delete it immediately.

Both forums were Invision forums, so it's most likely an Invision hack targetted at the vulnerabilties since Invision doesn't update anymore.

Posted: Mon Apr 24, 2006 12:03 pm
by navynuke04
Thanks for the heads up. I've backed up the forums just in case....

Posted: Tue Apr 25, 2006 10:25 am
by Swift
Fixed at last! Took me forever to find the hack!

It was in the board wrapper all along.

Unfortunately, the forums are still down because we're planning to convert it to something more stable.

Posted: Tue Apr 25, 2006 12:54 pm
by Vertius
More hacking. Someone's got some hate for people making Adventure games, you'd think.

First IA, now this. Hopefully you can get the forums up again soon.

Posted: Tue Apr 25, 2006 1:24 pm
by Swift
On the contrary, it appears more like an attack against all sites that used the outdated Invision forums, rather than an attack against game-making sites. Thanks for your concern. The forums will be up as soon as it gets converted.

Posted: Tue Apr 25, 2006 7:32 pm
by Broomie
Swift wrote:On the contrary, it appears more like an attack against all sites that used the outdated Invision forums, rather than an attack against game-making sites. Thanks for your concern. The forums will be up as soon as it gets converted.
What is your source? If that is so and we experience another attack I'll most likely switch to phpBB. Crap but hey it works.

Posted: Wed Apr 26, 2006 4:59 am
by Boogeyman
Whoever did this had better not try it here!

Posted: Wed Apr 26, 2006 2:36 pm
by Broomie
I doubt it, since Swift did say it seems to be an attack on outdated Invision Boards instead of a direct attack to gaming if you read it.

Posted: Thu Apr 27, 2006 3:15 am
by Swift
Jamie wrote:What is your source? If that is so and we experience another attack I'll most likely switch to phpBB. Crap but hey it works.
IA, QFMG and Hero6 all used the Invision forums (free version). IA forums were attacked last month, QFMG forums were attacked two weeks ago, then Hero6 last week, then QFMG forums again last week. If it's just an attack on game making groups, then there's no reason for QFMG forums to be attacked at all, let alone twice.

Plus, while googling for how the iframes hack worked, I came across other Invision forums that were also hacked during this period, and there was talk about how easy it is to hack into the 1.3.1 version. Most likely there's a security hole in the 1.3.1 Final version that allows hackers to exploit it.

Posted: Thu Apr 27, 2006 7:11 am
by Broomie
Swift wrote:
Jamie wrote:What is your source? If that is so and we experience another attack I'll most likely switch to phpBB. Crap but hey it works.
IA, QFMG and Hero6 all used the Invision forums (free version). IA forums were attacked last month, QFMG forums were attacked two weeks ago, then Hero6 last week, then QFMG forums again last week. If it's just an attack on game making groups, then there's no reason for QFMG forums to be attacked at all, let alone twice.

Plus, while googling for how the iframes hack worked, I came across other Invision forums that were also hacked during this period, and there was talk about how easy it is to hack into the 1.3.1 version. Most likely there's a security hole in the 1.3.1 Final version that allows hackers to exploit it.
Well, even so we've covered so if that is the case we shouldn't be getting hacked for that reason from now on.  ;)

Posted: Fri May 05, 2006 6:17 pm
by Swift
The forums are now back with a brand new design and new features.

Hero6

Posted: Mon May 08, 2006 12:44 pm
by Alistair
Wow, rough luck, guys- I really like the Invision style of forum (though I love phpBB for its' simplicity, also).

Loved the Hero6 project for aeons, it feels like (2 teams since I started following it ;) ). Kudos for getting it back up!

- Alistair

Posted: Mon May 08, 2006 5:24 pm
by Swift
Thanks. :)