#1 ·
Hey there! 🙂
Don't delete this post—I want people on here to see exactly what went down.
Just wanted to drop a heads-up about some weird activity on the forum lately... You probably noticed a few accounts got compromised. "Hacked" might not be the technical term, but it works. Honestly, "phished" is probably more accurate. 😉
So, how did I pull it off? Well...
I set up a JavaScript redirect and started blasting private messages to various users. Inside those PMs was a link disguised as a standard thread from our usual discussion boards. 😁 If you clicked that link, it would land you on a fake login page designed to look just like our site... once you entered your credentials, those usernames and passwords were sent straight to my email, along with your session cookies via a .txt file.
I also scattered a couple of links around the forums.
Anyway, it's over now. I've disabled the redirect, so if anyone clicks that link today, nothing will happen...
Here are the accounts I managed to grab:
anonymous xy
F. Chief
Imago Dei
NMT
jutreni
Just a heads-up: I only changed the password for anonymous xy (new one is 3333333). Everyone else still has their original passwords; I didn't touch them!
Just thought you guys should know.
And yeah, that’s about it.
The joke is over. I could have caused massive damage if I actually wanted to, but I didn't. Take this as a little lesson or a reality check: you really need to watch your surroundings... especially when it comes to DMs and links sent by people you don't know! 😁
Go ahead, you can ban me now! 😁 Either way, I won't be sticking around much longer.
Happy Holidays to everyone! 😍
PS: I'm not Kitty, nor am I DOMINIK01, but I'm a good friend of theirs. Doesn't matter... peace out!
Don't delete this post—I want people on here to see exactly what went down.
Just wanted to drop a heads-up about some weird activity on the forum lately... You probably noticed a few accounts got compromised. "Hacked" might not be the technical term, but it works. Honestly, "phished" is probably more accurate. 😉
So, how did I pull it off? Well...
I set up a JavaScript redirect and started blasting private messages to various users. Inside those PMs was a link disguised as a standard thread from our usual discussion boards. 😁 If you clicked that link, it would land you on a fake login page designed to look just like our site... once you entered your credentials, those usernames and passwords were sent straight to my email, along with your session cookies via a .txt file.
I also scattered a couple of links around the forums.
Anyway, it's over now. I've disabled the redirect, so if anyone clicks that link today, nothing will happen...
Here are the accounts I managed to grab:
anonymous xy
F. Chief
Imago Dei
NMT
jutreni
Just a heads-up: I only changed the password for anonymous xy (new one is 3333333). Everyone else still has their original passwords; I didn't touch them!
Just thought you guys should know.
And yeah, that’s about it.
The joke is over. I could have caused massive damage if I actually wanted to, but I didn't. Take this as a little lesson or a reality check: you really need to watch your surroundings... especially when it comes to DMs and links sent by people you don't know! 😁
Go ahead, you can ban me now! 😁 Either way, I won't be sticking around much longer.
Happy Holidays to everyone! 😍
PS: I'm not Kitty, nor am I DOMINIK01, but I'm a good friend of theirs. Doesn't matter... peace out!