MyBB Community Forums › Community Archive › Archived Forums › Archived Development and Support › MyBB 1.2 Series › MyBB 1.2 General Support v
got hacked again (v1.1.7)

Threaded Mode
got hacked again (v1.1.7)
Sgop Offline
Posts: 4
Threads: 2
Joined: Aug 2006
Reputation: 0
#1
2006-08-01, 02:25 PM
I just upgraded to myBB 1.1.7 when again the template 'index' was altered to redirect to http://kingwolf.by.ru/hack3/

I don't know how this is possible, maybe they guessed my database password. I've changed it.

Another thing i recognized: I found 2 (recent) users in my database with 'usergroup=2' and 'additionalgroups=4' !! I deleted them right away, the usernames were names like '123456'...

Find
obviosotyoracle Offline
Posts: 4
Threads: 1
Joined: Aug 2006
Reputation: 0
#2
2006-08-01, 03:40 PM
Find
MiNT Offline
Posts: 620
Threads: 22
Joined: Aug 2005
Reputation: 1
#3
2006-08-01, 03:48 PM (This post was last modified: 2006-08-01, 03:50 PM by MiNT.)
Sgop Wrote:I just upgraded to myBB 1.1.7 when again the template 'index' was altered to redirect to http://kingwolf.by.ru/hack3/

I don't know how this is possible, maybe they guessed my database password. I've changed it.

Another thing i recognized: I found 2 (recent) users in my database with 'usergroup=2' and 'additionalgroups=4' !! I deleted them right away, the usernames were names like '123456'...
Follow the Instructions here ...
http://community.mybboard.net/showthread.php?tid=10111

Why does it seam that only Turkish script kiddies are going after MyBB?
[Image: MiNT.png]
Website Find
obviosotyoracle Offline
Posts: 4
Threads: 1
Joined: Aug 2006
Reputation: 0
#4
2006-08-01, 04:38 PM
I was hacked before by Turkish hackers when I was using PHPBB. Doing a search on google shows that there is a major problem with Turkey and hackers.

As for my forum, it looks like its been shut down from the admin panel, rather than being seriously screwed with, meaning that there is some specific value in the database that I might be able to change back. I don't have a working knowledge of MyBB though, so I have no idea where to look.
Find
Copernicus Offline
Posts: 41
Threads: 4
Joined: Jul 2006
Reputation: 0
#5
2006-08-01, 04:58 PM (This post was last modified: 2006-08-01, 05:43 PM by Copernicus.)
I was hacked yesterday by them on 1.1.3, then I upgraded to 1.1.7. I hope this does not happen to it again, if so, considering MyBB is my favorite forum system software, I won't leave it, although I would really like to see this problem fixed.

Website Find
sarnzzle Offline
Posts: 1
Threads: 0
Joined: Jul 2006
Reputation: 0
#6
2006-08-01, 06:55 PM
I was hacked by the same Turkish people.. how did you guys fix it? For whatever reason, I can't log into the admin cp now.

I was on 1.1.3.

Any help would be appreciated, I already pm'ed the mods.
Find
Copernicus Offline
Posts: 41
Threads: 4
Joined: Jul 2006
Reputation: 0
#7
2006-08-01, 07:03 PM
Search your phpmyadmin for 'King' and remove all the kingwolf crap. Then upgrade to 1.1.7, its fairly easy. Just upload all the files except for the install, inc/settings.php, and inc/config.php.
Website Find
Snowy Offline
Posts: 423
Threads: 50
Joined: May 2006
Reputation: 0
#8
2006-08-01, 07:04 PM
That's funny... My lanparty site (which is a PHPNuke) also got hacked by a Turkish hacker..

Hmmm...
pwnt.
Website Find
SnakEyez Offline
Posts: 255
Threads: 7
Joined: Jul 2006
Reputation: 3
#9
2006-08-01, 07:05 PM
Snowy Wrote:That's funny... My lanparty site (which is a PHPNuke) also got hacked by a Turkish hacker..

Hmmm...

Which verison of Nuke are you using? If you are not using the latest paid verison (7.9) than more than likely you will never be safe from the 2 injection holes.
[Image: signature.gif]
Find
Copernicus Offline
Posts: 41
Threads: 4
Joined: Jul 2006
Reputation: 0
#10
2006-08-01, 07:25 PM
The turks are going on a rampage!

Wait, this means they could hack this forum as well, although I doubt they would because this is copyrighted and stuff.
Website Find


Forum Jump:


Users browsing this thread: 1 Guest(s)