Page 1 of 1

[July 26 of 2014] Be careful! The SMBX Forums were hacked

Posted: 27 Jul 2014, 0:00
by Wohlstand
Some hacker group called the "High SMBX Council" has hacked the SMBX forums and removed all announcements include the main SMBX downloads post and wrote fake posts from the admin accounts.
Because not everyone knows about this, I made this topic.

I've made a full backup of our database and site files, just in case.
We have very small chances of being hacked because we are using phpBBex instead of the original phpBB, which has lots of unfixed security holes (one of the old versions of phpBB or original phpBB was used by the SMBX forums).

Here are some IRC logs which have some information about the attack:
2014-07-26.155357+0400MSK.html
2014-07-26.210358+0400MSK.html

Posted: 27 Jul 2014, 11:25
by Veudekato
well,who was register on SMBX forums should to change password to more hard.

Posted: 27 Jul 2014, 13:30
by Kevsoft
It only affected people, who got phished, i.e. got their password stolen on a fake page!

Posted: 27 Jul 2014, 15:11
by Veudekato
yes kevsoft, for example SMBX 1.3.0.1 link is virus. but this site have normal mirror

Posted: 27 Jul 2014, 20:12
by Tinkerbell
You guys shouldn't be in bad things since they only go at smbx forums with the game smbx itself and since you guys have platgenwohl they won't attack you.

Posted: 27 Jul 2014, 20:36
by Kevsoft
Well Cloud's forum got attacked too and they don't are directly in contact with SMBX.

Posted: 28 Jul 2014, 16:51
by Tinkerbell
Cloud had a hidden subforum for smbx which got deleted by them when they took over EricMouse his account. Cloud may have abandon smbx on his forum but the point they attacked it was the because of the hidden subforum for smbx.
Currently people trying to find the spy who tells those people all the stuff to attack the forums. But yeah idt this one here get's attacked since Platgenwohl is not in any relation with smbx.

Posted: 28 Jul 2014, 17:27
by Kevsoft
We still have a small SMBX section. Neverthan less I will NEVER press on a phishing link.

Posted: 28 Jul 2014, 20:37
by Luigifan2010
They hit my small forum too. Had about 40 posts that are all gone.

Posted: 28 Jul 2014, 21:06
by Wohlstand
Whoever is working with phpBB 3 forums, I'm recommending you replace your phpBB to other forks like phpBBex, because the original phpBB has a lot of security holes.
English page:
http://phpbbex.com/forum/viewtopic.php?t=28

Posted: 29 Jul 2014, 17:36
by Luigifan2010
Well there's nothing really I can do about that since my forum is hosted by prophpBB. They phished my password though, that's how they got in.
I know because the maintenence logs in the admin panel show that an off IP logged in as me.

Posted: 11 Jan 2018, 20:18
by Kianotti2000
Wohlstand wrote:Some hacker group called the "High SMBX Council" has hacked the SMBX forums and removed all announcements include the main SMBX downloads post and wrote fake posts from the admin accounts.
Because not everyone knows about this, I made this topic.

I've made a full backup of our database and site files, just in case.
We have very small chances of being hacked because we are using phpBBex instead of the original phpBB, which has lots of unfixed security holes (one of the old versions of phpBB or original phpBB was used by the SMBX forums).

Here are some IRC logs which have some information about the attack:
2014-07-26.155357+0400MSK.html
2014-07-26.210358+0400MSK.html
Oh My God,Im Gonna Go To SMBX Universe

Posted: 11 Jan 2018, 20:57
by Wohlstand
Hello Kianotti2000! You just now did a necroposting :skull: :crazy:

This thread has three years ago and no more actual as:
- This event happen three years ago and no more repeated except of spam that sometimes sending on that place.
- Currently SMBX Forums uses an updated version of phpBB, so, no more security holes.