Bug Possible Hack

[feverc5]

I received an email saying we got hacked. I was just wondering / letting you know. I am currently running the (vBulletin 4.2.4 Beta 3) and multiple DB tech plugins. I Don't know if you want any logs. We are currently not thinking that your products were involved, but want to make the logs if wanted avalible for any investigative purposes.

---------------------------------------------
I'm a journalist, not a forum member. There's a claim on Twitter that feverclan was hacked and 50k users' data dumped.

The tweet announcing the claimed hack: ️️️️ on Twitter: "https://t.co/LnahXjYB5n with over 50,000 Users was hacked on 9/28/16
Hashed Passwords, Emails, Ip's, and more.
@pr0jekkt @FeverClan https://t.co/MhzVuxMf7s" There is an image attached to that tweet, purportedly a screenshot of your database.

The self-proclaimed hacker adds: pr0jekt on Twitter: "@Allergically @FeverClan I shelled the site and dumped the dab a base faggot"

Can you confirm or deny the claimed hack? You can reach me at admin@databreaches.net with your statement for publication. Thank you.

Dissent
--
DataBreaches.net

 

[Fillip H.]

I would recommend asking your server host for assistance or hiring a security expert to go over the logs, as this is not really something I'm able to assist with unfortunately.

There are currently no known exploits in any DragonByte product, what other products do you have installed?

The first step towards re-securing the site would be to look in any CHMOD 0777 directory for any files that shouldn't be there, such as the c99 PHP Shell script which is the most common "script kiddie" shell used.

 

[feverc5]

I would recommend asking your server host for assistance or hiring a security expert to go over the logs, as this is not really something I'm able to assist with unfortunately.

There are currently no known exploits in any DragonByte product, what other products do you have installed?

The first step towards re-securing the site would be to look in any CHMOD 0777 directory for any files that shouldn't be there, such as the c99 PHP Shell script which is the most common "script kiddie" shell used.

Awesome. Thank you for your fast response. We are taking care of it now, we just wanted to notify incase you guys wanted to look it over. Thank you for your great products.

 

[DragonByte Technologies]

Hello feverc5,

This ticket has now been closed with the status Cannot Reproduce.

We hope your issue or question has been addressed to your satisfaction. If not, please feel free to re-open it by clicking this link.

If you have any further issues or questions, please feel free to start a new support ticket via the button at the top of every page.

Thank you!