[July 26 of 2014] Be careful! The SMBX Forums were hacked

Description: Casual SMBX discussion.
Moderators: Moderators, Semi-moderatos

Wohlstand M
Topic author, Lead Developer
Lead Developer
Avatar
Wohlstand M
Topic author, Lead Developer
Lead Developer
Age: 31
Reputation: 507
Posts: 1825
Joined: 15 Feb 2014
English Pronouns: he/him
Location: Moscow, Russia
Website Youtube channel URL Skype Tencent QQ

Post #1by Wohlstand » 27 Jul 2014, 0:00

Some hacker group called the "High SMBX Council" has hacked the SMBX forums and removed all announcements include the main SMBX downloads post and wrote fake posts from the admin accounts.
Because not everyone knows about this, I made this topic.

I've made a full backup of our database and site files, just in case.
We have very small chances of being hacked because we are using phpBBex instead of the original phpBB, which has lots of unfixed security holes (one of the old versions of phpBB or original phpBB was used by the SMBX forums).

Here are some IRC logs which have some information about the attack:
2014-07-26.155357+0400MSK.html
2014-07-26.210358+0400MSK.html
Image

Veudekato M
Viscount
Viscount
Avatar
Veudekato M
Viscount
Viscount
Reputation: 79
Posts: 369
Joined: 19 Feb 2014
Location: Russia

Post #2by Veudekato » 27 Jul 2014, 11:25

well,who was register on SMBX forums should to change password to more hard.
My channel (PlatGEnWohl news and tutorials , smbx tests):
http://www.youtube.com/channel/UC6h-42umT14iR1wa3VkOs3Q

Kevsoft M
Angry developer
Angry developer
Avatar
Kevsoft M
Angry developer
Angry developer
Age: 25
Reputation: 93
Posts: 379
Joined: 26 Apr 2014
Location: Austria
Website

Post #3by Kevsoft » 27 Jul 2014, 13:30

It only affected people, who got phished, i.e. got their password stolen on a fake page!
▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬ Signature.start() ▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬ Signature.end() ▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬

Veudekato M
Viscount
Viscount
Avatar
Veudekato M
Viscount
Viscount
Reputation: 79
Posts: 369
Joined: 19 Feb 2014
Location: Russia

Post #4by Veudekato » 27 Jul 2014, 15:11

yes kevsoft, for example SMBX 1.3.0.1 link is virus. but this site have normal mirror
My channel (PlatGEnWohl news and tutorials , smbx tests):
http://www.youtube.com/channel/UC6h-42umT14iR1wa3VkOs3Q

Tinkerbell F
Honourable citizen
Honourable citizen
Avatar
Tinkerbell F
Honourable citizen
Honourable citizen
Age: 31
Reputation: 20
Posts: 38
Joined: 10 Jun 2014
Location: Ankara

Post #5by Tinkerbell » 27 Jul 2014, 20:12

You guys shouldn't be in bad things since they only go at smbx forums with the game smbx itself and since you guys have platgenwohl they won't attack you.

Kevsoft M
Angry developer
Angry developer
Avatar
Kevsoft M
Angry developer
Angry developer
Age: 25
Reputation: 93
Posts: 379
Joined: 26 Apr 2014
Location: Austria
Website

Post #6by Kevsoft » 27 Jul 2014, 20:36

Well Cloud's forum got attacked too and they don't are directly in contact with SMBX.
▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬ Signature.start() ▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬ Signature.end() ▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬

Tinkerbell F
Honourable citizen
Honourable citizen
Avatar
Tinkerbell F
Honourable citizen
Honourable citizen
Age: 31
Reputation: 20
Posts: 38
Joined: 10 Jun 2014
Location: Ankara

Post #7by Tinkerbell » 28 Jul 2014, 16:51

Cloud had a hidden subforum for smbx which got deleted by them when they took over EricMouse his account. Cloud may have abandon smbx on his forum but the point they attacked it was the because of the hidden subforum for smbx.
Currently people trying to find the spy who tells those people all the stuff to attack the forums. But yeah idt this one here get's attacked since Platgenwohl is not in any relation with smbx.

Kevsoft M
Angry developer
Angry developer
Avatar
Kevsoft M
Angry developer
Angry developer
Age: 25
Reputation: 93
Posts: 379
Joined: 26 Apr 2014
Location: Austria
Website

Post #8by Kevsoft » 28 Jul 2014, 17:27

We still have a small SMBX section. Neverthan less I will NEVER press on a phishing link.
▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬ Signature.start() ▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬ Signature.end() ▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬

Luigifan2010 M
Developer
Developer
Avatar
Luigifan2010 M
Developer
Developer
Reputation: 6
Posts: 31
Joined: 29 Mar 2014

Post #9by Luigifan2010 » 28 Jul 2014, 20:37

They hit my small forum too. Had about 40 posts that are all gone.

Wohlstand M
Topic author, Lead Developer
Lead Developer
Avatar
Wohlstand M
Topic author, Lead Developer
Lead Developer
Age: 31
Reputation: 507
Posts: 1825
Joined: 15 Feb 2014
English Pronouns: he/him
Location: Moscow, Russia
Website Youtube channel URL Skype Tencent QQ

Post #10by Wohlstand » 28 Jul 2014, 21:06

Whoever is working with phpBB 3 forums, I'm recommending you replace your phpBB to other forks like phpBBex, because the original phpBB has a lot of security holes.
English page:
http://phpbbex.com/forum/viewtopic.php?t=28
Image

Luigifan2010 M
Developer
Developer
Avatar
Luigifan2010 M
Developer
Developer
Reputation: 6
Posts: 31
Joined: 29 Mar 2014

Post #11by Luigifan2010 » 29 Jul 2014, 17:36

Well there's nothing really I can do about that since my forum is hosted by prophpBB. They phished my password though, that's how they got in.
I know because the maintenence logs in the admin panel show that an off IP logged in as me.

Kianotti2000
Citizen
Citizen
Avatar
Kianotti2000
Citizen
Citizen
Reputation: -1
Posts: 6
Joined: 6 Jan 2018

Post #12by Kianotti2000 » 11 Jan 2018, 20:18

Wohlstand wrote:Some hacker group called the "High SMBX Council" has hacked the SMBX forums and removed all announcements include the main SMBX downloads post and wrote fake posts from the admin accounts.
Because not everyone knows about this, I made this topic.

I've made a full backup of our database and site files, just in case.
We have very small chances of being hacked because we are using phpBBex instead of the original phpBB, which has lots of unfixed security holes (one of the old versions of phpBB or original phpBB was used by the SMBX forums).

Here are some IRC logs which have some information about the attack:
2014-07-26.155357+0400MSK.html
2014-07-26.210358+0400MSK.html
Oh My God,Im Gonna Go To SMBX Universe

Wohlstand M
Topic author, Lead Developer
Lead Developer
Avatar
Wohlstand M
Topic author, Lead Developer
Lead Developer
Age: 31
Reputation: 507
Posts: 1825
Joined: 15 Feb 2014
English Pronouns: he/him
Location: Moscow, Russia
Website Youtube channel URL Skype Tencent QQ

Post #13by Wohlstand » 11 Jan 2018, 20:57

Hello Kianotti2000! You just now did a necroposting :skull: :crazy:

This thread has three years ago and no more actual as:
- This event happen three years ago and no more repeated except of spam that sometimes sending on that place.
- Currently SMBX Forums uses an updated version of phpBB, so, no more security holes.
Image


Return to “General”

Who is online (over the past 5 minutes)

Users browsing this forum: 4 guests