Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 04 Sep 2012, 10:51
FTG LIQUID CL's Avatar
FTG LIQUID CL FTG LIQUID CL is offline
 
Join Date: Jan 2012
Someone hacking website

Not sure if this is the right place to post this,But I need some help.Someone is hacking in to my website.A couple days ago I got on my website and the entire home page had been changed.On the home page was a message that said you have been hacked by powersurge.
Then today someone posted in my chat box that my website was gonna be moving to power surge.The weird part is ,it said it was posted by the main admin account on my website.I changed my passwords right away.I restored my website through my host account.Every thing seems to be fine,but how was someone able to hack my website and how do I stop it from happening again.Thanks
Reply With Quote
  #2  
Old 04 Sep 2012, 12:22
LouiseWilson LouiseWilson is offline
 
Join Date: Oct 2007
Could be many reasons, security on your server, chmod incorrectly of certain files, insecure mods, there are more obvious ones

I would right at this time disable your mods via your config.php and .htaccess your mod cp & admincp to just your IP address.
Without logs or more information I'm not sure what else anyone can do for you.

Oh and back up daily ............. or in your case right now back up hourly :P
__________________
Let The Tunez Take You Into Over Drive
DJNetworx
Reply With Quote
  #3  
Old 04 Sep 2012, 13:24
New Joe's Avatar
New Joe New Joe is offline
 
Join Date: May 2009
Yes, p0wersurge, claim they can hack any vBulletin forum, and that is really more of a, they can, over a claim

They hacked one huge site, which in a way was good as it was a site for nulled scripts, vbteam was the name, they also tried to take down another huge nulled site called, forumscriptz, but they got their server down quickly as they saw vbteam getting hacked.
The outcome of the above was good for IB and vBulletin, as they are now both off line and won't be coming back.

The people who did this to your forum are here:
http://www.p0wersurge.com/forums/forum.php
https://twitter.com/p0wersurge

All vbulletin customers should be aware their Forums are not safe from these hackers, they are the best around at the present time.

As said above, keep backups of everything, and keep an eye on what is happening on your forum.

Last edited by New Joe; 04 Sep 2012 at 14:46.
Reply With Quote
  #4  
Old 04 Sep 2012, 13:45
FTG LIQUID CL's Avatar
FTG LIQUID CL FTG LIQUID CL is offline
 
Join Date: Jan 2012
They just recently hacked me,could this be because of a mod I recently added.I dont understand why they would want to hack my forum.I only have like 500 members and its a gaming website.Thanks for the info.
Reply With Quote
  #5  
Old 04 Sep 2012, 13:49
New Joe's Avatar
New Joe New Joe is offline
 
Join Date: May 2009
It's not a case as why, it's more of 'they can' so they do.
All about the vbulletin stuff can be found in this section
http://www.p0wersurge.com/forums/forumdisplay.php?f=201
Reply With Quote
  #6  
Old 04 Sep 2012, 14:44
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
No point in the link joe can't see any posts unless you register
Reply With Quote
  #7  
Old 04 Sep 2012, 14:45
New Joe's Avatar
New Joe New Joe is offline
 
Join Date: May 2009
I just registered so I could read the Threads, really easy to do
Reply With Quote
  #8  
Old 04 Sep 2012, 14:46
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Not going to register on a hacking site
Reply With Quote
  #9  
Old 04 Sep 2012, 14:58
New Joe's Avatar
New Joe New Joe is offline
 
Join Date: May 2009
Use a proxi or vps and make a new e mail account just for that site only.
Really interesting how they can hack vbulletin sites, lots if information within the Threads there.
Reply With Quote
  #10  
Old 04 Sep 2012, 15:08
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by New Joe View Post
All vbulletin customers should be aware their Forums are not safe from these hackers, they are the best around at the present time.

I don't buy the "can hack any forum" thing. It doesn't matter how good a hacker is, they still need to find a mistake to exploit. It's always possible there is a hole in vbulletin that isn't publicly known, but I think it's more likely that they go looking for known security issues that haven't been repaired.
Reply With Quote
  #11  
Old 04 Sep 2012, 15:15
New Joe's Avatar
New Joe New Joe is offline
 
Join Date: May 2009
I totally understand where you are coming from kh99, but these guys are at the present the best around.
They have many Threads which give information on such things as you mention, and I do think myself that they could hack any vbulletin forum they wanted to.

They're getting very well known around the inner circle too.
Maybe pass on this info to your guys to check out too.
Reply With Quote
  #12  
Old 04 Sep 2012, 16:21
FTG LIQUID CL's Avatar
FTG LIQUID CL FTG LIQUID CL is offline
 
Join Date: Jan 2012
I think i might have a look at their site,thanks for the info.

--------------- Added 04 Sep 2012 at 16:24 ---------------

I just got an email from vbulletin saying that There is possible security exploit in yet another award system mod.I have that mod so I will disable it and see if that helps.Thanks again
Reply With Quote
  #13  
Old 04 Sep 2012, 16:55
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by New Joe View Post
I totally understand where you are coming from kh99, but these guys are at the present the best around.
Yeah, hackers like to go on about how good they are. If you could hack any forum at will there would be no reason to only hack a few random sites. But that's exactly what you'd do if you were searching for specific vulnerabilities.
Reply With Quote
  #14  
Old 04 Sep 2012, 17:10
John Lester's Avatar
John Lester John Lester is offline
 
Join Date: Nov 2004
FTG take a look at this thread, https://www.vbulletin.com/forum/show...i-e-p0wersurge
Reply With Quote
  #15  
Old 05 Sep 2012, 08:25
FTG LIQUID CL's Avatar
FTG LIQUID CL FTG LIQUID CL is offline
 
Join Date: Jan 2012
Thank you john,that should help.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 18:28.

Layout Options | Width: Wide Color: