TexasCHLforum.com

I think TGT just got hacked. Any one seen this before?

TheCytochromeC wrote:I think TGT just got hacked. Any one seen this before?

What happened? I just signed up about a week ago.
EDIT: Never Mind I just tried to go there and I see what you mean.

Just tried to check the latest and there was some kind of HTML image or something saying "hacked by masalar". "we are Myanmar Muslim Cyber Force"

TheCytochromeC wrote:Just tried to check the latest and there was some kind of HTML image or something saying "hacked by masalar". "we are Myanmar Muslim Cyber Force"

replete with Arabic music in the background

Most forums give away their software version and often hosting server version. With that information, it's relatively trivial to try well documented exploits.
In this case, this group is targeting Vbulletin (forum software) sites because they know how to hack them. Apparently people running Vbulletin are scrambling to fix it.
I wouldn't take it as something that targets our common interest.

If you have a server up, people are scanning looking for holes 24/7/365.. It's just the nature of our wild west internet.

If the site is hacked, stay away from it...

cb1000rider wrote:
If the site is hacked, stay away from it...

As in FOREVER or just for a while? There was a great thread on beef ribs in the off topic I just can't live though

TheCytochromeC wrote:

cb1000rider wrote:
If the site is hacked, stay away from it...

As in FOREVER or just for a while? There was a great thread on beef ribs in the off topic I just can't live though

Not forever, but until year hear that it has been restored and verified by the host.

EDIT: BTW, it is definitely no guarantee, but LULZ MOON (or Myanmar Muslim Cyber Force) that hacked the forum is known for hacks to raise awareness and not to introduce malware. Regardless its a good idea to avoid the site until you hear it is restored.

For non-members and the curious, so you won't have to visit the site, this is what shows at TGT right now:



To respond to the OP, yes, it's been seen before. TGT was hacked and vandalized some time back and was offline for weeks. For those of us for whom TGT is as close as we get to "social media", it was an irritating interlude.

The passwords on vBulletin are double hashed, but your contact information is likely exposed.

Cripes. This is like, what, the third time in a year. With as many people on there, and as many paying advertisers (me included!), you'd think it could be managed better.

It is disgusting to me that these vandals act as if they are performing a public service. If they were truly white-hats, they would contact the site owner and say, "We have discovered the following vulnerabilities in your CMS. If you would like consultation, we are security experts, and we are available for a fee. Phone 800-555-1234."

Instead, they throw rocks through your windows, and say, "Your windows are broken. Please fix them now. Sorry for breaking your windows." I'd happily shoot one in the 'nads if I thought I could get away with it.

TGT gets hacked quite often. It wa down for several weeks if not months earlier this year. I stopped going there because of this.

OldCannon wrote:Cripes. This is like, what, the third time in a year. With as many people on there, and as many paying advertisers (me included!), you'd think it could be managed better.

Folks on this forum may not be aware that TGT was just sold and migrated to a new server. The new management has run some scripts to make boilerplate changes to the forum. I sincerely hope the vulnerability that was exploited is new and not a result of an oversight during their migration and updating. That would be, well, not exactly unforgiveable but hardly confidence-inspiring.

Carry-a-Kimber wrote:TGT gets hacked quite often. It wa down for several weeks if not months earlier this year. I stopped going there because of this.

I wouldn't say "quite often" but it has happened at least a couple of times in recent memory. Given some of the grousing the members are doing about changes made by the new management, the timing of this attack is very bad for that board.

cb1000rider wrote:The passwords on vBulletin are double hashed, but your contact information is likely exposed.

Aren't double hashed passwords only more secure than single hashed passwords when the attacker doesn't know they are double hashed?

Now since there probably isn't any financial info (bank acct #, cc # etc...) attached to TGT accounts, I doubt they would spend the energy to brute force a bunch of salted double hashed account passwords.

That being said, if you use the same password on other more sensitive sites, I would still suggest changing them.