Yet Another Forum - Hacked

Posted By: m1keread | Sep 7th, 2007 @ 6:41 AM
page 1 of 1
Comments: 3 | Views: 4502
#Sep 7th, 2007 @ 6:41 AM
m1keread
m1keread
Bored of Captions
Looks like the Yet Another Forum.NET forum has been hacked.

Cant find any info as yet on this, I guess it has happened recently.

http://forum.yetanotherforum.net/yaf_forum.aspx

You can get to the support forums if you click quickly!!

Anyone know anything more about this ?

Mike
#Sep 7th, 2007 @ 7:01 AM
W3bbo
W3bbo
The Master of Baiters
I concurr, I've been getting a bunch of spams from YAF's email address by some group involving NetDevilz.org (some script-kiddie website).

It looks like they just found a vulnerabiltiy in YAF.com's installation (which might be on other people's too) and started hijacking sessions. So to be safe, don't login to YAF's website until Jaben gives it the all clear.
#Sep 7th, 2007 @ 7:14 AM
JonLumb
JonLumb
W3bbo wrote:
I concurr, I've been getting a bunch of spams from YAF's email address by some group involving NetDevilz.org (some script-kiddie website).

It looks like they just found a vulnerabiltiy in YAF.com's installation (which might be on other people's too) and started hijacking sessions. So to be safe, don't login to YAF's website until Jaben gives it the all clear.


Just went on there and everything seemed fine to me, although I didn't login, so that may be a factor
#Sep 7th, 2007 @ 8:07 AM
m1keread
m1keread
Bored of Captions
JonLumb wrote:

W3bbo wrote: I concurr, I've been getting a bunch of spams from YAF's email address by some group involving NetDevilz.org (some script-kiddie website).

It looks like they just found a vulnerabiltiy in YAF.com's installation (which might be on other people's too) and started hijacking sessions. So to be safe, don't login to YAF's website until Jaben gives it the all clear.


Just went on there and everything seemed fine to me, although I didn't login, so that may be a factor


It was fine for a while, its been done again though.  One comment in forum reckons that the main admin password may heve gone.

You dont need to login, just visit the tope level of the forum and a redirect puts you to the NetDevilz.org site.
page 1 of 1
Comments: 3 | Views: 4502
Microsoft Communities