MyBB Community Forums

Full Version: I'm Probably the Next ?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2 3
Few minutes ago I received an email from UGNazi group;
[attachment=26447]

One of my user has reported my site to them that I've provided Yaldaram.com's users few tips to prevent from their hacking. (Yes, I've emailed all my users to change their board's passwords etc. incase to prevent from penetration because UGNazi had claimed that they've access to mybb.com's database when it has been claimed to hacked). Now they're going to hack my site too.
Quote:This message may not have been sent by: [email protected]

Spoofing is all too easy these days. To be honest it sounds like a 12 year old kid trying to scare you. Compare UGNazi's writing to that email, and you'll see a vast difference,

My advice? Ignore it.
He actually has used my Contact Us page which shows the similar message when I try to send it through;
[attachment=26448]

So it might be from UGNazi ? Unfortunately there is no logged IP of the sender.
Regardless, compare that email to this paste: http://pastebin.com/EsjMBQtg

You can see the difference.

Quote:wait us until our group hack your site

I've never heard anyone from UGNazi use such poor grammar. If they're taking down sites which are promoting security they would probably target my site first, as that's what it's based around.
Darn on the IP thing. I'm sure they wouldn't appreciate someone impersonating them.
Just received another email;
[attachment=26450]
I suggest not to answer. In case of real attack just backup all files, and then restore it on new hosting\registrar.

AND change all your passwords for hosting\domain\admin\email NOW in case they stole some personal info so the can't use it. Install anti spy software on your PC and check it for spyware. Protect your PC.
I think I've track down the culprit. He registered with two usernames;
http://yaldaram.com/member.php?action=profile&uid=11129
http://yaldaram.com/member.php?action=profile&uid=11130

Both have the same IP: 118.101.207.129

Its originating from Johor Bahru, Malaysia : http://whatismyipaddress.com/ip/118.101.207.129

His third account: Muhammad99Izzat , and at mybb.com, its account is: Muhammad99Izzat.

He posted a tip where he used to change index template so that changed index page will redirect to UGNazi website.

Initial investigation has revealed this user. I don't know if he has group or what but you may ban the IP and username I mentioned above from all your websites.

Goodluck.
There is at least one lowlife going around impersonating them. I strongly suspect that email is forged so you shouldn't be too concerned.

Check the email headers and see if it actually came from gmail.
their IP same like me?it because you ban my IP.
UGNazi have hack IP to?
Pages: 1 2 3