Page 2 of 4 FirstFirst 1234 LastLast
Results 11 to 20 of 40

Thread: Spam Questions? Has this site been hacked?

  1. #11
    Newbie
    Join Date
    Dec 2005
    Posts
    49
    yep looks like someones got in there, got same email

  2. #12
    Constant Bitrate almera's Avatar
    Join Date
    Aug 2004
    Posts
    195

    Unhappy

    I also got one of those.
    ----------------------------------------------------------------------

  3. #13
    Raw Wave Rob Withey's Avatar
    Join Date
    Apr 2000
    Location
    Bedfordshire, UK
    Posts
    2,139
    Me too. I got two identical copies of the same email, one at 02:38, one at 08:00.
    Old Systems retired due to new car
    New system at design/prototype stage on BeagleBoard.

  4. #14
    Newbie
    Join Date
    Nov 2004
    Posts
    44
    I haven't been on this site in years and I got one as well. Have the admins taken a look at the server yet?

  5. #15

  6. #16
    Low Bitrate
    Join Date
    Jan 2004
    Location
    California
    Posts
    70
    Quote Originally Posted by SFGrimoire View Post
    Same here. I use unique addresses only registered on this site...
    Same here. Not the first time I've seen this happen either. : \
    2008 Subaru Impreza WRX-STI
    Pioneer AVIC-D3 <-- poooor comparison to StreetDeck!!!

    2003 Toyota MR2 Spyder
    Stock... for now

    SOLD - 04 WRX - In-Dash Touchscreen, MacMini, StreetDeck ver 1

  7. #17
    is back. FKA Robert Wray
    Auto Apps:loading...
    Fiberoptic's Avatar
    Join Date
    Jul 1978
    Location
    Baltimore, MD
    Posts
    1,418
    Blog Entries
    143
    First of all, we have not sold the list. So if our server did this, it is a problem with our server. I agree the header files certainly point to us.

    As of around 9am est we shut off the forum mail server so it can't send more mail until we get this figured out. We have tickets into support at wiresix to help us figure out how this happened. Replies might be slow due to the thanksgiving holiday.

    This also means e-mail notification will be off until we fix the problem.

    As far as updates are concerned, all of our apps and plugins have all the updates so we are having a tough time figuring out where the penetration occurred. We have several people working on it as I write this. If any forum members are experts on penetration testing and don't mind volunteering some advice, we would love to hear from you.

    I apologize if our server sent you spam. Spam is one of the worst evils of the internet, we will look into additional measures of protecting our mail list from spam in the event the server gets hacked again.

    I would also like to point out that our forum system is entirely different from our store site which is on a completely different host with no access to one another. No credit card, phone or address information has been compromised due to the completely different systems.

  8. #18
    Variable Bitrate blurp's Avatar
    Join Date
    Sep 2003
    Location
    Hampshire, TN
    Posts
    349
    Thanks Fiberoptic.

    I hope you figure this out.

    I also hope that it was your server that sent the emails. Hopefully, nobody got a copy of all of our email addresses to give to other spammers.
    www.bradleyjacobs.com

    There is more stupidity than hydrogen in the universe, and it has a longer shelf life. -- Frank Zappa

  9. #19
    Raw Wave
    Auto Apps:loading...
    justchat_1's Avatar
    Join Date
    Jul 2008
    Location
    Boston, Ma or NY,NY
    Posts
    2,359
    Ok first things first....fix the security policy on your email server. A properly secured mail server should lock down if it tries to send more then X emails per hour (for example the entire mp3car user list).

    Second which i'm guessing you've already done is rotate all admin, database and FTP passwords.

    Third, you have an FTP server up and running on the default port. Does this have access to the website base directory?

    Fourth, do you have any access logs that might give a clue as to who might have got in or how they did it?

    Fifth, are you sure you identified which files were being compromised with the bad links and how they were being accessed?

  10. #20
    Newbie
    Join Date
    Mar 2006
    Posts
    0
    I started getting spam a few days ago from mp3car also and as of an hour again I am still getting them. Something about male enhancement on the last one. Have not logged in for several years I do not think. I am guessing the database was hacked and emails were taken ? What other information did they get ? Username, passwords, info from the store ?

Page 2 of 4 FirstFirst 1234 LastLast

Similar Threads

  1. some random pics i thought were cool
    By damixt in forum Off Topic
    Replies: 10
    Last Post: 08-03-2005, 07:26 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •