XF 1.4 Hacking Issues today

[Console Crunch]

Hello, Right today lot of xenforo games sites has been hacked today, like 4 sites, not sure how they did, people saying about something called "0day" there is nothing bad we did against our security, and really not sure how they have hacked all this sites, one of them are my site

 

[Pieman]

Are you running any addons?

 

[Console Crunch]

Are you running any addons?

Yes, Ill tell you my addons on a few on private, I have my site closed at this moment working on things.

 

[Console Crunch]

They used a xenforo file

 

[Pieman]

Don't tell me best to tell Xenforo developers and mod developers

 

[Paul B]

The hacking reports we have been made aware of have been due to compromised passwords, server configuration/software, or other installed applications, such as WordPress.
If you are on shared hosting, it's also possible they managed to gain access via another account on the server.

Your host is the best person to contact.

 

[Pieman]

Probably best to take this conversation private to the xenforo staff so they can address any issues quickly

 

[Placid]

i can vouch this guy, this guy called shadow realm site <site using a nulled version of XenForo removed> has defaced alot of sites in the PS3 modding community

 

[Placid]

he claims he uses a xenforo file

 

[Paul B]

Then we would need specifics in order to investigate.

 

[JackIsi]

^ he is also defacing a lot more, he did like 15 sites in 1 night .. claiming to use a clean xenforo file, what my friend also see in logs

 

[Hoffi]

people saying about something called "0day"

It's Zero day. Zero-day (computing) - Wikipedia, the free encyclopedia

So, it's new. I hope that soon enough details are known by the Team to fix ist.

 

[Placid]

well i hope the developers take look into it asap before more sites are rekt.... what do u know. maybe this site might get defaced also ...

 

[Chris D]

We don't currently have anything to look into, because the methods used aren't exactly clear. It'd be like looking for a needle in a haystack. If any one has any further information, please open a ticket.

 

[Paul B]

I am closing this to reduce the speculation and prevent any more links to sites running nulled versions of XF from being posted.

You can report it via the ticket system but we would need specifics to be able to investigate.