Vbulletin.com hacked

[shimei]

For us VB5 owners.... I hope they fill us in when they have it figured out.

[TheLastSuperman]

I just noticed as well, apparently Cold had Zero things to do on a Saturday, I'd hate to be so lonely myself!

[shimei]

Had a guy come onto my site yesterday. He claimed to be using a program that could create registered accounts, and used some 200 proxies. I believe he referred to it as xrumer profiles. Supposedly he creates hacks and sells them.

Of course the only thing I could do was to manually moderate new accounts. He created another account near instantaneous.

[bridge2heyday]

This is Very Bad , I think it will have a big effect on vbulletin

[TheLastSuperman]

You can still access the members area via https://members.vbulletin.com

It appears to have only been the forums, the main home page and all subsequently related pages work along with the members area as well.

If your vB5 forum is hacked, close the board and await an announcement and new security patch because currently since we (the public) do not know the exploit used, overwriting with fresh files from a version with an apparent exploit won't be of much use.

*Although to be fair this could have been some other form of exploit... server possibly however I doubt that based on it only being the vB5 powered forums down currently - we honestly do not know yet . *This may also be something that affected the specific version on vbulletin.com, meaning that usually they run a slightly newer version than what is currently released so it's entirely possible only their version was compromised and no others are at risk however that's dependent on a number of factors.

Is it bad? Well sure no one likes being defaced that way but let's not start a panic and have chaos ensue in this thread, we'll know more soon .

[Dave]

Now the question is if it got hacked because of a vBulletin 5 exploit or something else. Looking at the amount of vBulletin 5 vulnerabilities in the past, it does not surprise me if it's a vBulletin 5 exploit.

[bridge2heyday]

The hacker in his Facebook page says he lost control , He claims he could control the site for 1 minute only .

[napy8gen]

How many times vbulletin.com hacked since 2001 and what version?

[TheLastSuperman]

Originally Posted by Dave

Now the question is if it got hacked because of a vBulletin 5 exploit or something else. Looking at the amount of vBulletin 5 vulnerabilities in the past, it does not surprise me if it's a vBulletin 5 exploit.

LOL I was editing my post rewording it with something along those lines before I saw your post .

Originally Posted by bridge2heyday

The hacker in his Facebook page says he lost control , He claims he could control the site for 1 minute only .

More than likely due to all the security they have in place to prevent things like this from occurring. Why are you on his facebook page? Silly to even bother visiting it imo, trash all looks the same.

Originally Posted by napy8gen

How many times vbulletin.com hacked since 2001 and what version?

I only know of one other time, I barely recall another time before that but can't say for sure. I know the p0wetards... err I mean p0wersurge folks were able to pull it off a while back. I can only vouch for twice myself.

[Max Taxable]

Originally Posted by shimei

Had a guy come onto my site yesterday. He claimed to be using a program that could create registered accounts, and used some 200 proxies. I believe he referred to it as xrumer profiles. Supposedly he creates hacks and sells them.

Of course the only thing I could do was to manually moderate new accounts. He created another account near instantaneous.

I laugh at XRumer. defeated long ago.