Broken Bat - Discussion Forum: Warning

Post ID	Date & Time	Game Date	Function

#153	09/25/2011 12:00:00 am
colegiadodelfinesniza Joined: 11/07/2010 Posts: 0 Inactive	This morning (CET) the server was hacked by Tiger-M@te (i don't know him)!

#154	09/25/2011 12:00:00 am
colegiadodelfinesniza Joined: 11/07/2010 Posts: 0 Inactive	It seems that it was a defacement!

#155	09/26/2011 12:00:00 am
admin Joined: 01/27/2010 Posts: 4985 Administrator	Can you explain...server time looks fine to me. Steve

#156	09/26/2011 12:00:00 am
admin Joined: 01/27/2010 Posts: 4985 Administrator	This morning our hosting service had an issue with the being hacked which caused almost half a million websites to be defaced. They have resolved the issue and the site is back to normal. See press release about it below: Steve InMotion Hosting apologizes, says it “understands” method used by TiGER-M@TE InMotion, in an email to users, said Sunday that the homepage defacement attack launched by the southeast Asian hacker TiGER-M@TE was not meant to do permanent or catestrophic damage to the hundreds of thousands of websites that were hit. “We understand the method the attacker used to accomplished this and the main exploit path was through an internal management server that can control Cpanel on other servers. The management server was used to change passwords on the Cpanel servers then login with those passwords,” said Todd Robinson, president of the hosting company. The defacement attacked worked by replacing index files in all public_html directories with the attacker’s own branded index.php. InMotion does not believe that any data was stolen or that any passwords were compromised. “It does not appear that gaining passwords was a goal or was accomplished, just password changes were used. Access to the management server was gained from an exploited customer’s server that was within our network,” Robinson said. “Though our team moved quickly to disable the internal management server and limit the exposure of the servers to this attack when it began, it was a very serious breach and could have been much worse if the hacker had intended to do more harm.” This does fit the modus operandi of TiGER-M@TE, who often claims to hack for fun or just to prove that “it can be done.” Blast Magazine’s network of websites were defaced during the attack on InMotion, as was the offical City of Providence website. InMotion took responsibility for failing to prevent the damage. Some estimates have the attack hitting more than 500,000 websites, making it historic in its proportions if not in its level of damage. “Please accept our apologies as we go through this process,” Robinson said. “We are very aware of our failure in this situation and we will provide more details when we have completed the work of recovery.”

#157	09/26/2011 12:00:00 am
colegiadodelfinesniza Joined: 11/07/2010 Posts: 0 Inactive	i was on BB when the defacing happened, iread on the web that Tiger-M@te was a "cool hacker" based in Bangladesh, he was just exploiting the failures in servers, i do believe as stated in the company's release that no damage was done, for safety reasons i immediatly quit internet (Mozilla Firefox) and shut down the computer, so more worries than damages but i thought that you wouldn't have noticed it due to the time of the "attack". Regards, Cole.

#158	09/26/2011 12:00:00 am
admin Joined: 01/27/2010 Posts: 4985 Administrator	Yes, thanks for the head's up -- I was away in Los Angeles and didn't see it real-time. I guess this TigerMate fellow is pretty famous. Steve

#163	09/27/2011 12:00:00 am
Heathcoat Joined: 08/16/2011 Posts: 0 Inactive	I'll never understand someone who hacks just to get away with it. What's the point, to prove you are not only good at hacking but have no imagination whatsoever? Insecure and sad when you have to try and mess something up just to get pleasure. Cool Hacker seems a bit of an oxymoron to me.