MyBB Community Forums

Full Version: forum hacked?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2 3 4
Going to website shows
[attachment=37860]

if i try to ssh into my server i get 
metulburr@ubuntu:~$ ssh [email protected]
[email protected]'s password: 
Last login: Mon Nov 21 22:27:39 2016 from cpe-MY_IP.stny.res.rr.com
Connection to python-forum.io closed.
Who did you piss off and who did you give access to ssh/ftp
If you have backup than restore your forum.
luckily snapshot in digital ocean come in handy Smile

but lost 5 days worth of data

researching it SEC Hackers are russian hackers. Maybe they didnt like us sending their IP's to stop forum spam lol

Has anyone else had a problem like this?


SSH info to other admins. I can assure they can be trusted.
^ I'd suggest to take care of regular backup of the database ..

Edit: related guidance => recovering forum
So i got the forum up again.....but now i am worried that there is a software vulnerability in mybb.

is there a way to force password a change on everyone the next time they log in?
(2016-11-23, 05:28 AM)metulburr Wrote: [ -> ]So i got the forum up again.....but now i am worried that there is a software vulnerability in mybb.

is there a way to force password a change on everyone the next time they log in?

http://modmybb.com/thread-131.html
that just says "You need a subscription order to be able to download plugins" after i register
(2016-11-23, 08:07 AM)metulburr Wrote: [ -> ]that just says "You need a subscription order to be able to download plugins" after i register
Hmmmm...
https://mods.mybb.com/view/force-password-change
This plugin is for MyBB 1.6 only. You can try change compatibility to 18* (https://community.mybb.com/thread-75646.html)
tried that one beforehand, it just causes errors after you change the compatability
Pages: 1 2 3 4