Alpha Centauri 2

Community => Recreation Commons => Topic started by: E_T on January 12, 2017, 05:43:19 PM

Title: WPC hacked??
Post by: E_T on January 12, 2017, 05:43:19 PM

Over at WePlayCiv, they apparently had recently been hacked, apparently using a vBulliton exploit of some form or the other.  The Hacker used Dale's account to post a thread in the community forum.  Dale (real this time) posted in same thread that wasn't him, then had short conversation with himself (the hacker).  GK posted something, then the hacker used his account to further post.

Apparently, Dale changing his password did not solve problem, as the Hacker stated that he had not hacked the individual accounts, but the site itself, and changing your password there would not fix it.



VERY STRONG SUGGESTION: If you have an account there and use the same password on other sites, change your password on all but WPC, ASAP!

Title: Re: WPC hacked??
Post by: Unorthodox on January 12, 2017, 05:48:43 PM

No, they should keep telling me that it's all an issue on my end nothing wrong with their site. 

Title: Re: WPC hacked??
Post by: E_T on January 12, 2017, 06:25:15 PM

Although Nick could have had a better reply than he used... 

Title: Re: WPC hacked??
Post by: Unorthodox on January 12, 2017, 09:12:57 PM

Whatever.  I tried to tell them it was suspect weeks ago, the security algorythms were saying so.  Someone just either finally admitted causing, or used the problem against them.  (I'm guessing from the messages I was getting they were infiltrated by a virus weeks ago) 

The people who care don't or can't do anything about it, and those who can don't care, unfortunately. 

Title: Re: WPC hacked??
Post by: Unorthodox on January 13, 2017, 03:13:00 PM

BU, please leave this up for those who might need it.

For those of you who continue to think it's all on my end:

Our version of mcafee at work basically just checks a shitton of places around the web. 

First the spam links that are showing up reported on WPC:

Quote

"Cheap Vista for Students" site:www.weplayciv.com    in new window
Generic Pill Soma Dose Lipitor Citrate Sildenafil Seizures site:www.weplayciv.com    in new window
"ultram detoxification" viagra klonopin site:www.weplayciv.com    in new window
"powered viagra wordpress" site:www.weplayciv.com    in new window
"Home loan monmouth new jersey" site:www.weplayciv.com    in new window
"Equity florida home in loan" "Va home" site:www.weplayciv.com    in new window
"Equity home loan massachusetts rate" "Bad credit" site:www.weplayciv.com    in new window
"Hydrocodone bitartate" "Cheap diet phentermine" site:www.weplayciv.com    in new window
"Secret to increase credit score" site:www.weplayciv.com    in new window
"My premier credit card account" "Wireless credit" site:www.weplayciv.com    in new window
"1000 cash loan payday advance" 660 site:www.weplayciv.com    in new window
"Reward 660 credit card" "payday loan" site:www.weplayciv.com    in new window
"viagra strip poker" phentermine site:www.weplayciv.com    in new window
"Invia nasal viagra" "weight loss" site:www.weplayciv.com    in new window
"In use viagra woman" tamiflu site:www.weplayciv.com    in new window
"mexican pharmacy phentermine" "money order viagra" site:www.weplayciv.com    in new window
"drug eli impotence lilly" "lortab wha" site:www.weplayciv.com    in new window

Note: These searches can only reveal certain types of hidden spam links. Other types of hidden links cannot be revealed this way.

To have more real-time information about most types of potentially harmful hidden content, use the Unmask Parasites service.

Then the reports that your website is malicious, and where:

Quote

Latest URLs hosted in this domain detected by at least one URL scanner or malicious URL dataset.


4/68 2017-01-10 00:36:56  http://www.weplayciv.com/wp-login.php (http://www.weplayciv.com/wp-login.php) 

4/68 2017-01-08 16:06:20  http://www.weplayciv.com/forums/downloads.php (http://www.weplayciv.com/forums/downloads.php) 

3/68 2017-01-04 06:34:39  http://www.weplayciv.com/forums/showthread.php?8549-Europa-Universalis-IV-AAR-Muscovy-From-min... (http://www.weplayciv.com/forums/showthread.php?8549-Europa-Universalis-IV-AAR-Muscovy-From-min...) 

3/68 2016-12-31 01:01:46  http://www.weplayciv.com/forums/attachment.php (http://www.weplayciv.com/forums/attachment.php) 

3/68 2016-12-01 08:07:18  http://www.weplayciv.com/forums/images/cms/sections.png (http://www.weplayciv.com/forums/images/cms/sections.png)

Looking at those, you can figure the login one is likely just from the hack.  The specific thread, however, is more likely a bad link or bad file in the thread somewhere. 

Of the ~70 places checked, here's who's reporting you how:

Sophos Malicious site
ESET Phishing site
Fortinet Phishing site
Google Safebrowsing Phishing site

Title: Re: WPC hacked??
Post by: Unorthodox on January 17, 2017, 09:58:59 PM

Seems to completely redirect oddball places from my phone now.

Title: Re: WPC hacked??
Post by: E_T on February 04, 2017, 08:12:06 PM

Tones of super spam over at WPC now...

Title: Re: WPC hacked??
Post by: Spacy on February 04, 2017, 11:56:25 PM

Yep.  Basically dead site for the past 2 months.  Feels like MZO did, except Solver and Co. are at least deleting the spam and doing some software updates.

Title: Re: WPC hacked??
Post by: Buster's Uncle on February 05, 2017, 12:00:16 AM

...It really looked, for several months, like the civ 6 was going to amount to something over there.  This makes me sad...

Title: Re: WPC hacked??
Post by: Spacy on February 05, 2017, 12:08:31 AM

Not enough regulars actually purchased 6 to really kick start things over there.

I know I am hesitant to force stuff as I got called basically "petty dictator" by several folks for trying to get stuff going.  Yet the soft pushes I did around x-mas as a last resort amounted to nothing as the so many had connectivity issues by that point.

Title: Re: WPC hacked??
Post by: Buster's Uncle on February 05, 2017, 12:35:27 AM

You were doing what needed to be done.  It's hard to believe that if you and E_T resumed nagging and stuck with it, a little action wouldn't happen.  People all waiting for someone else to fix the community isn't gonna do it.

Title: Re: WPC hacked??
Post by: E_T on February 15, 2017, 01:05:32 PM

Quote from: BUncle on February 05, 2017, 12:00:16 AM

...It really looked, for several months, like the civ 6 was going to amount to something over there.  This makes me sad...

They kept pushing back the SPDG and then the BS with the malware, etc started and here we are...

Title: Re: WPC hacked??
Post by: E_T on February 15, 2017, 01:20:07 PM

Quote from: Spacy on February 05, 2017, 12:08:31 AM

Not enough regulars actually purchased 6 to really kick start things over there.

I know I am hesitant to force stuff as I got called basically "petty dictator" by several folks for trying to get stuff going.  Yet the soft pushes I did around x-mas as a last resort amounted to nothing as the so many had connectivity issues by that point.

Whom was calling you a dictator (we hadn't even gotten out of chieftain, little alone started)?  I call it leadership...  I didn't really have the connection or time, as well as the game nor box to run it in...

By the way, I did get the Rimworld to work, but only running  it separate from Steam (running Rimworldwin.exe in the game folder).  It does run on my box, barely.... 30% world and smallest map.  Can only run in slow or fast, the med speed things all jump around all over or disappear... An is slower than the let's play show, almost unplayable slow, but can still play...   so thanks again, I am loosing way too much sleep now...  :p

Oh, how about a Freudian thread here?

Title: Re: WPC hacked??
Post by: E_T on February 15, 2017, 01:22:11 PM

Quote from: BUncle on February 05, 2017, 12:35:27 AM

You were doing what needed to be done.  It's hard to believe that if you and E_T resumed nagging and stuck with it, a little action wouldn't happen.  People all waiting for someone else to fix the community isn't gonna do it.

When the site is having the issues it is, best to wait until it's fixed before committing the effort....

Title: Re: WPC hacked??
Post by: Spacy on February 15, 2017, 11:57:37 PM

Quote from: E_T on February 15, 2017, 01:20:07 PM

Quote from: Spacy on February 05, 2017, 12:08:31 AM

Not enough regulars actually purchased 6 to really kick start things over there.

I know I am hesitant to force stuff as I got called basically "petty dictator" by several folks for trying to get stuff going.  Yet the soft pushes I did around x-mas as a last resort amounted to nothing as the so many had connectivity issues by that point.

Whom was calling you a dictator (we hadn't even gotten out of chieftain, little alone started)?  I call it leadership...  I didn't really have the connection or time, as well as the game nor box to run it in...

By the way, I did get the Rimworld to work, but only running  it separate from Steam (running Rimworldwin.exe in the game folder).  It does run on my box, barely.... 30% world and smallest map.  Can only run in slow or fast, the med speed things all jump around all over or disappear... An is slower than the let's play show, almost unplayable slow, but can still play...   so thanks again, I am loosing way too much sleep now...  :p

Oh, how about a Freudian thread here?

Well, glad it sorta works.  Some good mods out there, but they also usually impact performance so....


Wait and see on the thread I think. 

Title: Re: WPC hacked??
Post by: E_T on February 16, 2017, 02:49:36 PM

They are in the works towards changing the board's software platform towards something that Google won't have a problem with.  It's $200 and they have collected several donations from other board users towards the purchase and the migration to the new stuff...

Title: Re: WPC hacked??
Post by: Unorthodox on February 16, 2017, 05:47:19 PM

I thought it was still all on my end. 

Title: Re: WPC hacked??
Post by: Buster's Uncle on March 04, 2017, 02:45:36 PM

Seems to be down this morning...

Title: Re: WPC hacked??
Post by: Spacy on March 05, 2017, 01:53:26 AM

Yep, all day.  No idea why.