Page 2 of 3 FirstFirst 123 LastLast
Results 26 to 50 of 51
Like Tree6Likes

Thread: Strange Connections

  1. #26
    NikSam is offline AntiCon Artist
    Join Date
    Dec 2012
    Posts
    2,254

    Re: Strange Connections

    Quote Originally Posted by wserra View Post
    Think of it as RS having gained two new admins from the Russian mob.
    And a Russian guy (such as me) spotted them first.
    same mentality ?
    Last edited by NikSam; 09-13-2013 at 10:20 AM.

  2. #27
    wserra is offline Senior Member
    Join Date
    Jun 2010
    Posts
    143

    Re: Strange Connections

    Quote Originally Posted by NikSam View Post
    same mentality ?
    Да никогда, приятель!
    "A wise man proportions belief to the evidence."
    - David Hume

  3. #28
    EagleOne's Avatar
    EagleOne is offline Elite Scambuster
    Join Date
    Jun 2010
    Posts
    3,862

    Re: Strange Connections

    If they can already access your password for RS, what good does it do to change it? They would still be able to get the new one, wouldn't they? If so, need to wait until it is fixed, then reset a new password and then change that password if used on other sites, etc.. Make sense, or just ignorant of how this all works?
    EagleOne
    Founder/President Eagle Research Associates
    http://eagleresearchassociates.org
    http://swindles.org
    Author: "Robbing You With A Keyboard Instead Of A Gun - Cyber Crime How They Do It" available in soft cover and eBook at Amazon.com
    Lifetime Member of the National Association of Distinguished Professionals

  4. #29
    wserra is offline Senior Member
    Join Date
    Jun 2010
    Posts
    143

    Re: Strange Connections

    Quote Originally Posted by EagleOne View Post
    If they can already access your password for RS, what good does it do to change it? They would still be able to get the new one, wouldn't they?
    Quote Originally Posted by wserra
    if you use your RS password for anything else that matters to you, you ought to change the others.
    Emphasis supplied.
    "A wise man proportions belief to the evidence."
    - David Hume

  5. #30
    ribshaw's Avatar
    ribshaw is offline Nigerian Ministry
    Join Date
    Feb 2013
    Location
    Internet Cafe Nigeria
    Posts
    5,129

    Re: Strange Connections

    As a tip on the whole password thing that I thought was brilliant, but then... I set up separate passwords for every account I have, generally 12 + letters plus numbers. Nonsense stuff like 5ksjel48frl248, obviously I had to write them down, then I set my windows password to something hard to crack but easy for me to remember so it does not have to be written down. Of course most cyber attacks will come from external sources, but if someone busts in my office and finds the password list they will still be SOL.
    "It's virtually impossible to violate rules ... but it's impossible for a violation to go undetected, certainly not for a considerable period of time." Bernie Madoff
    https://www.facebook.com/pages/Scam-...98399986981403

  6. #31
    wserra is offline Senior Member
    Join Date
    Jun 2010
    Posts
    143

    Re: Strange Connections

    Quote Originally Posted by ribshaw View Post
    As a tip on the whole password thing
    Two other tips: KeePass. DashLane. I use the latter.
    "A wise man proportions belief to the evidence."
    - David Hume

  7. #32
    littleroundman is offline Administrator
    Join Date
    Jun 2010
    Posts
    17,234

    Re: Strange Connections

    Another excellent free password manager browser addon is LastPass
    The only thing necessary for the triumph of evil is for good men to do nothing

  8. #33
    ribshaw's Avatar
    ribshaw is offline Nigerian Ministry
    Join Date
    Feb 2013
    Location
    Internet Cafe Nigeria
    Posts
    5,129

    Re: Strange Connections

    Quote Originally Posted by littleroundman View Post
    Another excellent free password manager browser addon is LastPass
    Most of my non financial sites RS, Gmail, FB etc the passwords are stored with the browser somehow. On financial sites the none of my passwords are stored and the sites usually have some additional level of browser protection (prompting additional questions from a different IP upon log in). My question is with one of the password managers, what happens if your computer becomes compromised? Could someone not then log in as if they were you?
    "It's virtually impossible to violate rules ... but it's impossible for a violation to go undetected, certainly not for a considerable period of time." Bernie Madoff
    https://www.facebook.com/pages/Scam-...98399986981403

  9. #34
    wserra is offline Senior Member
    Join Date
    Jun 2010
    Posts
    143

    Re: Strange Connections

    Quote Originally Posted by ribshaw View Post
    My question is with one of the password managers, what happens if your computer becomes compromised? Could someone not then log in as if they were you?
    DashLane (and I think KeePass and LastPass as well) has a master password you need to enter once to start the app. It's the only one you need to remember.
    "A wise man proportions belief to the evidence."
    - David Hume

  10. #35
    wserra is offline Senior Member
    Join Date
    Jun 2010
    Posts
    143

    Re: Strange Connections

    BTW, I see you guys got rid of the new admins. You should be aware that I still get all the connections that made me start the thread, though. There is pretty clearly some rogue code still floating around, which may well allow hacker to make new new admins.
    "A wise man proportions belief to the evidence."
    - David Hume

  11. #36
    Fendaril is offline Senior Member
    Join Date
    Feb 2013
    Posts
    461

    Re: Strange Connections

    Just blame everything on Ken Russo.

    Honestly after that painfully long DDoS attack I wouldn't be surprised if someone was paid off to mess with the site.

    I hope im wrong.

  12. #37
    path2prosperity's Avatar
    path2prosperity is offline Elite Scambuster
    Join Date
    Jan 2011
    Location
    London UK
    Posts
    3,574

    Re: Strange Connections

    Quote Originally Posted by Fendaril View Post
    Just blame everything on Ken Russo.
    Or BoggyBoy Fiedur!

    My bet is on BoggyBoy as Ken can not speak Russian and probably does not know the crylic alphabet

  13. #38
    baylee is offline Senior Scambuster
    Join Date
    Jan 2011
    Posts
    980

    Re: Strange Connections

    Quote Originally Posted by Fendaril View Post
    Just blame everything on Ken Russo.

    Honestly after that painfully long DDoS attack I wouldn't be surprised if someone was paid off to mess with the site.

    I hope im wrong.
    I hope your wrong also but it makes a lot of sense.

  14. #39
    ribshaw's Avatar
    ribshaw is offline Nigerian Ministry
    Join Date
    Feb 2013
    Location
    Internet Cafe Nigeria
    Posts
    5,129

    Re: Strange Connections

    Perhaps this is one of the new admins. They sent me a message over on Facebook, some gibberish. When I check his friends list, shock of all shockers many claim to be hackers or have that Guy Fawkes mask as their profile pic. https://www.facebook.com/farenzy.turke

    Good thing Facebook takes things seriously.

    Hacker.JPG
    "It's virtually impossible to violate rules ... but it's impossible for a violation to go undetected, certainly not for a considerable period of time." Bernie Madoff
    https://www.facebook.com/pages/Scam-...98399986981403

  15. #40
    Fendaril is offline Senior Member
    Join Date
    Feb 2013
    Posts
    461

    Re: Strange Connections

    What grand scheme did you guys uncover to garner a fan base that is willing to take over ownership of a scam board full of people who use ad-blocker anyway.

  16. #41
    littleroundman is offline Administrator
    Join Date
    Jun 2010
    Posts
    17,234

    Re: Strange Connections

    Quote Originally Posted by Fendaril View Post
    Just blame everything on Ken Russo.

    Honestly after that painfully long DDoS attack I wouldn't be surprised if someone was paid off to mess with the site.

    I hope im wrong.
    Believe me, the forum is constantly under multiple forms of attack.

    The fact readers don't see it and we don't talk about it doesn't mean it isn't happening.

    We must be doing something right.
    The only thing necessary for the triumph of evil is for good men to do nothing

  17. #42
    EagleOne's Avatar
    EagleOne is offline Elite Scambuster
    Join Date
    Jun 2010
    Posts
    3,862

    Re: Strange Connections

    Well, the site still loads slow for me, as well as accessing the threads. I was hoping once this issue was fixed that would solve the problem. I keep running scans (malware and virus) thinking it might be at my end, but my system is safe. I ran four different virus programs and nothing found. Anyone else having the site load slow for them, or am I the only one?
    EagleOne
    Founder/President Eagle Research Associates
    http://eagleresearchassociates.org
    http://swindles.org
    Author: "Robbing You With A Keyboard Instead Of A Gun - Cyber Crime How They Do It" available in soft cover and eBook at Amazon.com
    Lifetime Member of the National Association of Distinguished Professionals

  18. #43
    littleroundman is offline Administrator
    Join Date
    Jun 2010
    Posts
    17,234

    Re: Strange Connections

    The boss is in his counting house, counting out his money upgrading the software as we speak, so most of the problems should be fixed.

    Other than that, the forum is loading normally for me.
    The only thing necessary for the triumph of evil is for good men to do nothing

  19. #44
    NikSam is offline AntiCon Artist
    Join Date
    Dec 2012
    Posts
    2,254

    Re: Strange Connections

    Code:
    127.0.0.1       damnxd.org      www.jobless-jack.com
    As a temporary solution, everyone can add this line to their hosts file
    it will break connections to those ad sites .
    Location of hosts file:

    WIN - C:/Windows/System32/drivers/etc/hosts
    MAC & LINUX - /etc/hosts

    more info: Patching the Hosts File to Stop Hackers and Block Websites | PC Memoirs

  20. #45
    ProfHenryHiggins is offline Elite Scambuster
    Join Date
    Mar 2011
    Posts
    2,833

    Re: Strange Connections

    Still seeing the odd extra sites loading.
    If you are in Prosper With Integrity, and do not like that your personal information has been published here, please talk to these good people: http://www.attorneygeneral.gov http://www.ic3.gov http://www.fbi.gov

  21. #46
    adminrealscam is offline Administrator
    Join Date
    Jun 2010
    Posts
    186

    Re: Strange Connections

    Removed the code below from the footer templates.

    <div id="footer_morecopyright" class="shade footer_morecopyright">
    <!-- Do not remove cronimage or your scheduled tasks will cease to function -->
    {vb:raw cronimage}
    <!-- Do not remove cronimage or your scheduled tasks will cease to function -->
    {vb:raw vboptions.copyrighttext}
    {vb:raw template_hook.footer_copyright}
    </div>

    The hackers that created admin accounts using the upgrade.php hole must have added this code to the footer templates.
    Firefox is no longer showing these redirects at the bottom of each page.

  22. #47
    adminrealscam is offline Administrator
    Join Date
    Jun 2010
    Posts
    186

    Re: Strange Connections

    Well that was dumb. The place where the injected crap was put in the copyright text in the AdminCP. Just took friggin forever to figure this one out.

    Site Name / URL / Contact Details

  23. #48
    EagleOne's Avatar
    EagleOne is offline Elite Scambuster
    Join Date
    Jun 2010
    Posts
    3,862

    Re: Strange Connections

    Thanks for fixing it! Now it loads like always....FAST! Tell everyone involved thanks for fixing this. It is appreciated.
    EagleOne
    Founder/President Eagle Research Associates
    http://eagleresearchassociates.org
    http://swindles.org
    Author: "Robbing You With A Keyboard Instead Of A Gun - Cyber Crime How They Do It" available in soft cover and eBook at Amazon.com
    Lifetime Member of the National Association of Distinguished Professionals

  24. #49
    NikSam is offline AntiCon Artist
    Join Date
    Dec 2012
    Posts
    2,254

    Re: Strange Connections

    Quote Originally Posted by adminrealscam View Post
    Well that was dumb. The place where the injected crap was put in the copyright text in the AdminCP. Just took friggin forever to figure this one out.

    Site Name / URL / Contact Details
    Forever? i told exactly that it is in copyrighttext variable

    every other site infected with those iframes been done same way

  25. #50
    Fendaril is offline Senior Member
    Join Date
    Feb 2013
    Posts
    461

    Re: Strange Connections

    Well at-least it didn't take almost a month to fix like the DDoS.

    So it looks like some wannabe hackers exploited a common bug that was passed around the hacker community. They probably just read some guide on how to break v-bulletin(insert version here) and got supa-excited about it!

    It took all but a few days to fix it, and now RS has more publicity. Brilliant plan Russian geek squad crew.
    Last edited by Fendaril; 09-15-2013 at 04:10 PM. Reason: Made it easier to read

Page 2 of 3 FirstFirst 123 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Disclaimer: Opinions expressed on this website are solely those of their respective authors.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42