Forum Hacked twice this week

[bennac40]

Hi,

My vBulletin Forum has been hacked twice this week. Whats going on. I have the latest version installed. And its the first time I get hacked ever since I had vBulletin since March 2008

Can anyone explain and help.

[ShawneyJ]

so whats being hacked? user accounts? server? how are they getting in?

[Marco van Herwaarden]

Also make sure you do not have any vulnerable modifications.

[TigerWare]

Was it just your site that was hacked? If you are using a shared hosting package the entire server may have been compromised by another site, and not actually anything to do with you. What does your host say? Are other sites on the server affected?

[bennac40]

No is a dedicated server. Only the forum is hacked. And non of the members are affected. Only the Administrator accounts seem to be deleted. There was a message that says.

"F***ed and Hacked by Turkish hacker"
"his email"
" F***ing stupid forum"

I uploaded the backup of my vBulletin now and I can log in but I would appreciate it if someone can check it out with me to see where is the vulnrability.

Thank you

[ShawneyJ]

this doesnt sound good for 3.7.2 pl1 as i thought all this was solved for now,

[Lynne]

Have you read and followed the instructions here - How To Make My Forums More Secure (http://www.vbulletin.com/forum/showthread.php?t=194701)

[Dismounted]

Most likely, you are being hacked because of a vulnerable modification - try un-installing all of them, making sure you remove its files from the server.

[TimberFloorAu]

I am interested in this guys post.

http://www.vbulletin.com/forum/showpost.php?p=1181489&postcount=5

That seems like a neat idea.

Not exactly sure how this works in practice.

If anyone has thoughts, be interested to listen.

[Marco van Herwaarden]

He already provided instructions in that post. If they are unclear then please ask in the original thread.