News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

Worrying Security Breach

Started by steve911, June 26, 2017, 05:56:46 PM

Previous topic - Next topic

steve911

Tonight, all of our users attempting to log on to our SMF Forum 2.14 were greeted with the following message:

Sorry, USER NAME, you have been banned from this forum. This ban is not due to expire

Examining the database on the server revealed that all of the user details tables had been deleted and we are now struggling to restore from a backup.

We know that this was a deliberate hack as someone has admitted to it on a Facebook page and we have now referred it to the Police but it's worrying that this could have happened.

Does anyone have any idea how this could have happened?

vbgamer45

Generally most of the time a hacker guesses/ or knows an admin or moderators password.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

steve911

It would have to be a hell of a guess

Colin

Do you have access to server logs? That is the only we way we can give an informed answer.
"If everybody is thinking alike, then somebody is not thinking." - Gen. George S. Patton Jr.

Colin

steve911

Yes but there are several. Which is the most relevant?

Arantor

For something like this, I'd be inclined to share all the logs with the SMF dev team, because for something like this, more information is always better for trying to work out what happened.

Also, what mods/themes are installed? It's quite possible something in the mods/themes is actually the problem; it's not unheard of that mods are the route into a system if one has a vulnerability.

steve911

sorry that should be 2.0.14 version

Illori


Advertisement: