Blue Sun Room Hacked.

POSTED BY: Haken
UPDATED: Friday, November 9, 2007 22:37
VIEWED: 29524
PAGE 1 of 6

Looks like the Blue Sun Room got hacked. Mostly likely by Chinese hackers since the javascript that the page now tries to load was the same one from a while back.

I'll have to restore from backups. Not exactly sure when it happened. Will let you guys know when I know more.

NOTIFY: Y  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

thanks captain!:)

NOTIFY: N  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

Well, that just sucks. Reloading the fics has to be tedious work. I hope it goes smooth for you.

---

I aim to misbehave, but I usually miss!

NOTIFY: Y  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

Quote:

---

Originally posted by PhyreLight:
Well, that just sucks. Reloading the fics has to be tedious work. I hope it goes smooth for you.

---

I aim to misbehave, but I usually miss!

---

Unfortunately, it looks like it's not going to be smooth. Just got through talking to the sysadmin and it looks there might be a problem with the backups. Will let you guys know when I know more.

NOTIFY: Y  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

Quote:

---

Originally posted by Haken:
Mostly likely by Chinese hackers

---

Which somehow seems strangely apropos.

-----
We applied the cortical electrodes but were unable to get a neural reaction from either patient.

NOTIFY: N  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

Is there anything we can do to assist? Is it helpful for us to repost, if possible?

NOTIFY: Y  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

Quote:

---

Originally posted by misswhatsis:
Is there anything we can do to assist? Is it helpful for us to repost, if possible?

---

Most likely people will have to repost for those days that I can't restore. The sysadmin tells me that there was a problem with the SQL dumps that he wasn't aware of and that the last good one is from October 12th, which means that we'll be missing about a couple of weeks of BSR postings.

NOTIFY: Y  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

we need an appreciatin' Haken thread - right now!:)

NOTIFY: N  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

Quote:

---

Originally posted by wytchcroft:
we need an appreciatin' Haken thread - right now!:)

---

Your wish, My command:
http://fireflyfans.net/thread.asp?b=5&t=31321

Appreciate Haken people!

Fe'nos Tol
JOSSIS(Most Definitely)AGOD

Self appointed Forsaken! Been on the list for a while now!
98% of teens have smoked pot, if you are one of the 2% that haven't, copy this into your signature.
"Look at me, I'm STUPID!" The Doctor.

NOTIFY: Y  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME

Ladies and gentlemen, it's worse than a mere hack.

I run Kaspersky Anti-Virus, and when I surfed into the Blue Sun room just now, it notified me of malware and trojan files in the code.

Let me see if I can cut-and-paste the relevant info from the report:

Detected
--------
Status Object
------ ------
detected: malware Exploit.HTML.IESlice.z URL: http://www.yl18.net/Yahoo.htm//Yahoo
detected: Trojan program Trojan-Downloader.JS.Psyme.kf URL: http://www.yl18.net/vip.htm//vip

...................

11/3/2007 12:35:52 AM URL: http://www.yl18.net/Yahoo.htm//Yahoo detected malware 'Exploit.HTML.IESlice.z'
11/3/2007 12:35:52 AM URL: http://www.yl18.net/Yahoo.htm//Yahoo access denied

11/3/2007 12:35:54 AM URL: http://www.yl18.net/vip.htm//vip detected Trojan program 'Trojan-Downloader.JS.Psyme.kf'
11/3/2007 12:35:54 AM URL: http://www.yl18.net/vip.htm//vip access denied


While I suppose it could be a false positive, I kinda think not, especially so soon after the page got hacked.

Haken, maybe you might want to check into this? If you need any more info, e-mail me and I will send you the log file.





one of the FORSAKEN: We aim to burn!

NOTIFY: Y  | REPLY  | REPLY WITH QUOTE  | PERMALINK  | TOP  | HOME