Toon Hacking/Account Stealing/Keylogging Consolidated Thread

[Grum Brug]

Originally Posted by the_mo

i just recently had our guild forum hacked and they added an <iframe> to the very end of the page to load up some shit. some guildmember alerted me as his virus-detection started ringing.

i dont want to go any more into details about how the page was hacked tho

i cant say any more about how they got in, but i think it was an automated attack like all the others because the iframe was very badly hidden in the settings

So your web site is compromised and yet you refuse to tell any one what it is so they can avoid it or the weakness they used so we can fix it? This is either total BS or you just rly that big of an ass-hat. Did you ever notice that the spammers tells are very badly written? Who cares about where the iframe was. If this is true your a fuck for letting it happen, your a duch for not reporting it to the FBI or some shit and your a homo for not telling us what the sire is. Fuck off. How about instead of wasting net space you put up a SS of exactly what it is the AV detected so that other people can test their own shit for this weakness. Ive heard allot of fag assed speculation going around all the forums and I have yet to see any hard line evidence hinting who the purps might actually be. Epic Fail.

[Phlamebait]

Originally Posted by Grum Brug

So your web site is compromised and yet you refuse to tell any one what it is so they can avoid it or the weakness they used so we can fix it? This is either total BS or you just rly that big of an ass-hat. Did you ever notice that the spammers tells are very badly written? Who cares about where the iframe was. If this is true your a fuck for letting it happen, your a duch for not reporting it to the FBI or some shit and your a homo for not telling us what the sire is. Fuck off. How about instead of wasting net space you put up a SS of exactly what it is the AV detected so that other people can test their own shit for this weakness. Ive heard allot of fag assed speculation going around all the forums and I have yet to see any hard line evidence hinting who the purps might actually be. Epic Fail.

Werd!

I too am very curious.... please spill the infoz.. unless, of course yer just baiting

[Merlonus]

its 3:30am i didnt read the whole thread but have a few questions about it.

1. Has anyone figured out HOW and WHO were hacking the accounts.
2. WTF is sony doing about it.
3. Please read question 1 again.

[Petgroup]

Originally Posted by Troubrin

its 3:30am i didnt read the whole thread but have a few questions about it.

1. Has anyone figured out HOW and WHO were hacking the accounts.
2. WTF is sony doing about it.
3. Please read question 1 again.

Not a single player thats been hacked has provided one shred of fucking evidence that would involve a virus/keylogger or fucking anything that would compromise the security on there computers.

All it has been is: "I was hacked, I didn't share info, Sony is closed on the weekend, I got my account back" but nobody posts evidence of this mythical bug thats going around. So that just means its going to happen to them again if there computer is compromised but they are so fucking dense, they don't know it. But I changed my password & secret question. Congrats, they got the new one and then some.

They all deserve whats happening to them.

And to answer what Sony is doing about it, more than they fucking should be doing. Now thats a first.

[Niber]

Originally Posted by Petgroup

And to answer what Sony is doing about it, more than they fucking should be doing. Now thats a first.

Random (speculative) public service announcements is enough in your mind? I'm not sold.

But yeah, it's all speculation (iFrame injections) because none of the compromised account owners has come forth with detailed information.

[Merlonus]

EDIT:
thx Niber for clearin it up

[Niber]

I'd be weary of all forums/wiki's/blogs .. whatever else, that allow (public) execution of html codes.

For instance, if you can type this HI and it actually turns bold and underlined. Then you should never visit that forum/wiki/blog again.

[Petgroup]

Originally Posted by Niber

Random (speculative) public service announcements is enough in your mind? I'm not sold.

That isn't what my sarcasm was aimed at. It's the fact that they are restoring these toons accounts that got magically "hacked" in the first place. The players getting hacked one way or the other are responsible for what happened.

The only scenario that disproves that is if someone at SoE or something attacking the security there ends up being responsible. Other than that, these dipshits bought accounts/plat/powerleveling, gave info to someone or have a virus/keylogger on there computer. None of which Sony should have any financial loss/man power or hours spent on for stupidity.

Think of it this way; Someone has to pay the bill for the employees that deal with these hacked accounts. GM's, phone/email etc. They all cost $. Sony gets it back one way or the other.

[Niber]

Originally Posted by Petgroup

Think of it this way; Someone has to pay the bill for the employees that deal with these hacked accounts. GM's, phone/email etc. They all cost $. Sony gets it back one way or the other.

Sorry, not buying that. Ever had your car stolen? Or your credit card?

But back to the keylogger issue. Assuming they're logging keystrokes, how are they getting the account name? My client saves my station name.

[Merlonus]

Originally Posted by Niber

I'd be weary of all forums/wiki's/blogs .. whatever else, that allow (public) execution of html codes.

For instance, if you can type this <b><u> HI </u></b> and it actually turns bold and underlined. Then you should never visit that forum/wiki/blog again.

myspace=bad? lol?