Hacked by Team Animus?

[EuroBeat2]

I've got hacked. I hope I got it back, but for some reason my "user titles" are gone. Like "junior fellow" "senior fellow" etc. Any suggestion? I tried to repair tables etc, but not to avail.

Tx

EB

[Frosty]

Originally Posted by Valter

I'm still wondering how they added files.

There must be something more than Forum Rules add-on.

After they got into the Admin Panel they could have easily add a plugin which would allow them to upload something on the site, i.e php shell for modifying of the current files, or uploading of the newer files.

[SilentSleeper]

Originally Posted by EuroBeat2

I've got hacked. I hope I got it back, but for some reason my "user titles" are gone. Like "junior fellow" "senior fellow" etc. Any suggestion? I tried to repair tables etc, but not to avail.

Tx

EB

1. Go in (phpMyAdmin) or SSH connecting
2. Open table user
3. Run SQL query

UPDATE user SET customtitle = '0' where customtitle = '1'

4. Then: Update the counters - Update User Titles and Ranks

[Kangaroo666]

Thanks for all your help Valter.

[0ptima]

Was everyone who got hacked using the Advanced Forum Rules?\

[Suiram]

Originally Posted by 0ptima

Was everyone who got hacked using the Advanced Forum Rules?\

i was only using that mod and the vb forums - nothing else. so to me, it's clear what it was. lesson learned. i will never us another mod again. yes, really.

[The Realist]

Since updating this poor mod Cyb - Advanced Forums Rules I've followed the above and all looked great until today.

Came hole from work and I could not find my forum so I FTPed in and all my files, the lot have been removed and site is now no more. Team Animus was the original hackers but I think they installed a backdoor and then regained access and deleted the lot.

Not happy because Im not running and backups locally and hoping my host has backups.

May reupload Vbulletin fresh and hope the database is ok.

Regards

[TheLastSuperman]

Originally Posted by The Realist

Since updating this poor mod Cyb - Advanced Forums Rules I've followed the above and all looked great until today.

That mod is not "poor" in fact as other staff members have posted recently about this subject, the code has been there for years and just now discovered as a exploit the same thing can be said about countless other softwares. Do you see vBulletin being sued for someone not patching their site when a exploit is found? No in fact everyone knows or should know it's falls on you and solely you if not patched. Further more that's just simply not fair to say despite what your going through, YOU installed it correct? Don't get me wrong I'm not saying you can't feel "wronged" I'm simply saying if you point that anger towards someone it should not be Valter's mod you've been using and enjoying for a while now, it should be those who defaced your site respectively.

[The Realist]

Point taken.

Originally Posted by TheLastSuperman

That mod is not "poor" in fact as other staff members have posted recently about this subject, the code has been there for years and just now discovered as a exploit the same thing can be said about countless other softwares. Do you see vBulletin being sued for someone not patching their site when a exploit is found? No in fact everyone knows or should know it's falls on you and solely you if not patched. Further more that's just simply not fair to say despite what your going through, YOU installed it correct? Don't get me wrong I'm not saying you can't feel "wronged" I'm simply saying if you point that anger towards someone it should not be Valter's mod you've been using and enjoying for a while now, it should be those who defaced your site respectively.

[GRJoker]

When I try and run the Query and it does not allow me to do so, Where exactly do you have to go and do the Query?