Jump to content

Photo

Recent site hack


  • Please log in to reply
24 replies to this topic

#1 SpleenBeGone

SpleenBeGone

    Deer Leader of the Goriest Revolution

  • Administrators
  • 14,951 posts
  • LocationHouston

Posted 12 November 2012 - 09:11 AM

There were recently some problems regarding website security. Emo and myself are both confident that the problem has been dealt with, and now we're just waiting to get put back on the clean browsing list. For security reasons, I encourage everyone to do a virus scan. It's highly unlikely that anyone was infected, but it's always best to be safe about these things.
nmjUGDL.jpg

#2 Guest_ElatedOwl_*

Guest_ElatedOwl_*
  • Guests

Posted 12 November 2012 - 09:23 AM

The details are basically that some naughty code was injected and running on the main page. I would like to make it clear that this was a vulnerability of the software being run on this site and at the time of writing does not seem like it was preventable; a patch was released for the software after the occurrence to fix the security issue.

You're most likely safe if you use Firefox or Chrome or have an active anti-virus running; regardless, I encourage you to do a virus scan. If you don't have an anti-virus client, I recommend performing a scan with malwarebytes. If anything seems out of the ordinary on your computer create a help request topic and I or someone else can help diagnose and resolve.

I'll be following this topic; if you have any concerns or questions about this feel free to make those heard here.

#3 Calvary

Calvary

    Conceptual

  • Members
  • 6,624 posts
  • Locationwww.

Posted 12 November 2012 - 11:00 AM

Cheers guys. =)

tumblr_om7nwjm5Wm1rsea1wo1_500.gif
Ask for my discord/Insta/Tumblr if you want.


#4 Affray

Affray

    Knower of things

  • Members
  • 5,753 posts
  • LocationThe Great White North

Posted 12 November 2012 - 12:43 PM

I did notice some odd coding jargon at the top of the main page when I logged in before this weekend, then was given a foreboding warning by my browser not to trust this site just now when I logged in.
Hopefully no gremlins are running around inside my computer chewing wires and soldering things together.
That is what happens when you get infected right?

It is perfectly acceptable to fear and admire a being you could not possibly understand.


#5 Guest_ElatedOwl_*

Guest_ElatedOwl_*
  • Guests

Posted 12 November 2012 - 12:55 PM

Heh, something like that.

#6 Majestic

Majestic

    Megabyte

  • Members
  • 289 posts
  • LocationOut of phase.

Posted 12 November 2012 - 02:50 PM

I did notice some odd coding jargon at the top of the main page when I logged in before this weekend, then was given a foreboding warning by my browser not to trust this site just now when I logged in.
Hopefully no gremlins are running around inside my computer chewing wires and soldering things together.
That is what happens when you get infected right?


Yes it's mainly the Gnomes that do it.

*insert cliché inspirational quote here*


#7 Affray

Affray

    Knower of things

  • Members
  • 5,753 posts
  • LocationThe Great White North

Posted 12 November 2012 - 02:56 PM

Yes it's mainly the Gnomes that do it.


Those bastards.

It is perfectly acceptable to fear and admire a being you could not possibly understand.


#8 Majestic

Majestic

    Megabyte

  • Members
  • 289 posts
  • LocationOut of phase.

Posted 12 November 2012 - 04:07 PM

Those bastards.


IKR?!

*insert cliché inspirational quote here*


#9 K_N

K_N

    Megabyte

  • Members
  • 576 posts
  • LocationPhoenix

Posted 13 November 2012 - 12:35 AM

I never noticed anything odd, what exactly was the injected code?

Rumors of my demise have been greatly exaggerated.


#10 twa

twa

    The Actual Administrator

  • Members
  • 2,728 posts

Posted 13 November 2012 - 03:06 AM

Still getting malware.

Zi9JkgO.gif

 

あ な た を 信 じ て い る 私 を 信 じ て 


#11 Calvary

Calvary

    Conceptual

  • Members
  • 6,624 posts
  • Locationwww.

Posted 13 November 2012 - 05:47 AM

Those bastards.


I always thought gnomes should be more included in typical fantasy lore. Just thought I'd put that out there. They should do occupy Middle-Earth for a better representation.

tumblr_om7nwjm5Wm1rsea1wo1_500.gif
Ask for my discord/Insta/Tumblr if you want.


#12 Guest_ElatedOwl_*

Guest_ElatedOwl_*
  • Guests

Posted 13 November 2012 - 08:24 AM

I never noticed anything odd, what exactly was the injected code?

The gist is it checked to see if you were using Windows and running IE, FireFox or Opera. If the conditions were true it would print out some malicious stuff and log your IP to a file in the directory. I've been scanning through the logs vs. registered members IPs and I have yet to find a match.

Specifics here.

#13 SpleenBeGone

SpleenBeGone

    Deer Leader of the Goriest Revolution

  • Administrators
  • 14,951 posts
  • LocationHouston

Posted 13 November 2012 - 03:06 PM

Of the 105 pages we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-11-13, and the last time suspicious content was found on this site was on 2012-11-12.

So it has been confirmed clean by google, now to wait for the warning to go away.
nmjUGDL.jpg

#14 Wolf

Wolf

    Zettabyte

  • Members
  • 6,487 posts

Posted 13 November 2012 - 07:27 PM

So it has been confirmed clean by google, now to wait for the warning to go away.


That shit takes a while, apparently

#15 Dasherman

Dasherman

    Megabyte

  • Members
  • 496 posts
  • LocationAzeroth and Sanctuary, simultaneously by using quantum powers

Posted 14 November 2012 - 11:31 AM

So that's what Chrome warned me about with its 'Return to Safety'
Quis custodiet ipsos custodes?
(//MihiPotestasSit\\)

#16 Affray

Affray

    Knower of things

  • Members
  • 5,753 posts
  • LocationThe Great White North

Posted 14 November 2012 - 12:34 PM

I just got here without any warnings coming up, much unlike the previous few days.

It is perfectly acceptable to fear and admire a being you could not possibly understand.


#17 Guest_ElatedOwl_*

Guest_ElatedOwl_*
  • Guests

Posted 14 November 2012 - 01:37 PM

Indeed, it should actually be clean now. Last time I missed a page that google picked up as malicious, but I'm now relatively certain I've got the last of it. Last scan from google came up clean - chrome should stop warning by tomorrow (I hope).

#18 SpleenBeGone

SpleenBeGone

    Deer Leader of the Goriest Revolution

  • Administrators
  • 14,951 posts
  • LocationHouston

Posted 14 November 2012 - 02:48 PM

Still warning me, but I'm happy to see that it's going away for people slowly.

All hail emo, the virus fixer.
nmjUGDL.jpg

#19 Guest_ElatedOwl_*

Guest_ElatedOwl_*
  • Guests

Posted 14 November 2012 - 02:49 PM

All hail emo, the notepad jockey.

ftfy

#20 Wolf

Wolf

    Zettabyte

  • Members
  • 6,487 posts

Posted 14 November 2012 - 03:30 PM

Wow, is there anything notepad can't do?




besides open rich-text formatted files