Something wrong with Realm667.

Doomworld Forums : Powered by vBulletin version 2.2.5

Doomworld Forums > Classic Doom > Doom General > Something wrong with Realm667.

Pages (4): « 1 2 [3] 4 »

Author

All times are GMT. The time now is 20:22.

Avoozl
Indecisive

Posts: 1046
Registered: 06-09

Tormentor667 said:
You must be the greatest idiot possible on this planet :D

Well they did say they were joking. :P

Anyways it's a good thing you managed to get the site back up.

Last edited by Avoozl on 12-28-12 at 16:04

12-28-12 04:51 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

djvero
Mini-Member

Posts: 55
Registered: 04-10

Yea, good to see the site back!

12-28-12 15:26 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

buttspit
Member

Posts: 381
Registered: 04-11

Tormentor667 said:

You must be the greatest idiot possible on this planet :D

Anyway, we are back online!

Didn't you try to convince people you had an imp outside your window?

12-28-12 19:49 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

Gez
Why don't I have a custom title by now?!

Posts: 9139
Registered: 07-07

Aaaaaaand it's hacked again.

If you do visit, please make sure to TURN OFF JAVASCRIPT FIRST.

I found an iframe injection code in the shoutbox js.

12-28-12 21:14 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

Blzut3
Member

Posts: 375
Registered: 06-04

I'm guessing the answer is no, but since I haven't been keeping up with this: Have you tried taking the forums offline (as in remove them from a public area on the server) and seeing if it's Joomla that's being hacked? Running Joomla 1.5 doesn't seem all that secure to me. (Apparently 1.5 is from before we learned publishing version numbers on the website is a really bad idea.)

12-28-12 23:07 #

Profile || Blog || PM || Email || Homepage || Search || Add Buddy

IP || Edit/Delete || Quote

printz
CRAZY DUMB ZEALOT

Posts: 8137
Registered: 06-06

Gez said:
Aaaaaaand it's hacked again.

If you do visit, please make sure to TURN OFF JAVASCRIPT FIRST.

I found an iframe injection code in the shoutbox js.

If I don't turn off Javascript, can it harm my pc/macbook/tablet (regardlessly)?

__________________
Available for download: Automatic Wolfen s tein - Wolfenstein 3D bot
MBF configuration for WHackEd2

12-28-12 23:18 #

Profile || Blog || PM || Homepage || Search || Add Buddy

IP || Edit/Delete || Quote

Gez
Why don't I have a custom title by now?!

Posts: 9139
Registered: 07-07

Maybe? I have no idea what range of OS will be affected by the malware it tries to make you download. And I don't especially care to find out.

12-29-12 00:00 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

NaturalTvventy
Forum Regular

Posts: 764
Registered: 06-09

Wasn't there a WIP compilation of sky textures on the forum? If anyone has it, please let me know.

01-01-13 17:46 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

Blue Shadow
Junior Member

Posts: 144
Registered: 09-12

NaturalTvventy said:
Wasn't there a WIP compilation of sky textures on the forum? If anyone has it, please let me know.

This one?

01-01-13 23:52 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

NaturalTvventy
Forum Regular

Posts: 764
Registered: 06-09

Blue Shadow said:

This one?

Maybe! I don't think I ever actually looked at it. Thanks for the link.

01-02-13 01:32 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

Pirx
Member

Posts: 632
Registered: 11-04

dumb shit, i don't quite get the point in hacking a site dedicated to an old game...

01-02-13 05:40 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

playerlin
Mini-Member

Posts: 83
Registered: 01-06

Pirx said:
dumb shit, i don't quite get the point in hacking a site dedicated to an old game...

Actually, many of them doesn't really care what site it is.
They just hackin' and profit(?) from it, or just use it to hackin' more.

01-02-13 12:44 #

Profile || Blog || PM || Email || Homepage || Search || Add Buddy

IP || Edit/Delete || Quote

Clonehunter
Forum Staple

Posts: 2457
Registered: 03-10

Pirx said:
dumb shit, i don't quite get the point in hacking a site dedicated to an old game...

Just hackin for fun. Good sites have fallen before, like Panel Monkey.

01-02-13 13:42 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

PRIMEVAL
Senior Member

Posts: 1731
Registered: 03-09

For the lulz, 'cause they can, for the gits and shiggles, etc.

01-02-13 19:23 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

Gez
Why don't I have a custom title by now?!

Posts: 9139
Registered: 07-07

I think it's mostly done by bots anyway. When the same file contains the injected malware code 14 times redundantly, that's not the sign of a hand-made hack...

01-02-13 19:55 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

Egregor
Junior Member

Posts: 118
Registered: 11-12

Gez said:
Aaaaaaand it's hacked again.

If you do visit, please make sure to TURN OFF JAVASCRIPT FIRST.

I found an iframe injection code in the shoutbox js.

Any update on this? I visited the site yesterday. Later, my comp started getting shuddery so I did a virus check, and I had one. It was simple enough to get rid of, but now I'm not sure if it was related to the site or other internet randomness. Is it safe to download DECORATE resources IF the Javascript is turned off? Any other experiences?

Is Realm667 the only DECORATE resource on the internet?

01-03-13 02:52 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

Gez
Why don't I have a custom title by now?!

Posts: 9139
Registered: 07-07

Downloading resources should be safe; I only found an injection on the forum (and it seems to be gone now, though I can't say if it's gone for good or not).

However, downloading stuff requires to be registered and logged in now. Apparently, Torm has had its bandwidth leeched and is trying to curtail that in this way.

01-03-13 11:31 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

Clonehunter
Forum Staple

Posts: 2457
Registered: 03-10

I think I just got a Trojan trying out the forums...

01-10-13 02:31 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

Blue Shadow
Junior Member

Posts: 144
Registered: 09-12

Make sure to disable JavaScript when visiting the forums.

01-10-13 02:43 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

Hectic
Mini-Member

Posts: 71
Registered: 04-10

I don't have Java, and I (stupidly) visited the site while hacked. All I saw was a picture of an inverted cross with the sentence "No rest for the living" below it. That means I did not get infected, right?

01-10-13 14:45 #

Profile || Blog || PM || Homepage || Search || Add Buddy

IP || Edit/Delete || Quote

Gez
Why don't I have a custom title by now?!

Posts: 9139
Registered: 07-07

Hectic said:
I don't have Java, and I (stupidly) visited the site while hacked. All I saw was a picture of an inverted cross with the sentence "No rest for the living" below it. That means I did not get infected, right?

1. Java is not JavaScript. Totally different things. If you go here and hear some weird music, you have JavaScript.

2. The petrine cross thing was just a placeholder picture because Torm wanted something doomier than "the site is offline for repairs". Just to be clear, the site was safe to visit during that time (even if there was no reason to visit it).

01-10-13 15:31 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

printz
CRAZY DUMB ZEALOT

Posts: 8137
Registered: 06-06

Clonehunter said:
I think I just got a Trojan trying out the forums...

Did you run it? Or the computer did it? I hope not�

I understand that you primarily should browse the Internet with Java disabled, I believe that is insecure. Even if in this case JavaScript is cracked, it may lead to Java exploits in the iframe, correct? Or non-Java.

__________________
Available for download: Automatic Wolfen s tein - Wolfenstein 3D bot
MBF configuration for WHackEd2

01-10-13 16:15 #

Profile || Blog || PM || Homepage || Search || Add Buddy

IP || Edit/Delete || Quote

Hectic
Mini-Member

Posts: 71
Registered: 04-10

Gez said:

1. Java is not JavaScript. Totally different things. If you go here and hear some weird music, you have JavaScript.

Well, I thought they were at least related because the name. I have it then. Love Post Hell. Thanks Gez.

01-10-13 18:34 #

Profile || Blog || PM || Homepage || Search || Add Buddy

IP || Edit/Delete || Quote

Clonehunter
Forum Staple

Posts: 2457
Registered: 03-10

printz said:
Did you run it? Or the computer did it? I hope not�

I understand that you primarily should browse the Internet with Java disabled, I believe that is insecure. Even if in this case JavaScript is cracked, it may lead to Java exploits in the iframe, correct? Or non-Java.

I believe I had Java off, as it was working fine before and I remember going through the process of disabling it. I refreshed the forum page and it all went off by itself.

01-11-13 02:19 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

D_GARG
Forum Regular

Posts: 869
Registered: 12-09

playerlin said:

Actually, many of them doesn't really care what site it is.
They just hackin' and profit(?) from it, or just use it to hackin' more.

look up if there is a guilty IP connection, find his ass and ask him to hack something that would get him on the news instead while he's at it.

01-11-13 09:45 #

Profile || Blog || PM || Homepage || Search || Add Buddy

IP || Edit/Delete || Quote

MarkAnthony89
Banned

Posts: 67
Registered: 01-13

This is crazy? Why Realm667? Why didn't they (don't know who or what) hack dead sites instead? Doomwadstation, NewDoom or teamTNT for example?

01-11-13 23:36 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

GreyGhost
a ghost... only grey

Posts: 6858
Registered: 01-08

The culprit is most likely a web-crawling bot that's exploiting vulnerabilities in Joomla, php or whatever in order to deliver its payload of popup advertising. It doesn't care whose site it is, though one with regular traffic is preferable to an online mausoleum.

01-12-13 01:07 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

AzaryDoom2020
Mini-Member

Posts: 86
Registered: 03-10

Oh great! Realms667 website is hacked by stupid virus, malware etc...

I hope they fixed soon. :)

01-28-13 03:04 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

DoomFan421
Newbie

Posts: 7
Registered: 06-10

Well, there goes my mapping for a good while, was looking to add a new weapon, but I only knew of it ever being hosted at 667 (y'know, like a lonnnng list of other great custom stuff that's there). Google didn't help me out either, so I guess I'm at kind of a loss for now.

01-28-13 05:56 #

Profile || Blog || PM || Search || Add Buddy

IP || Edit/Delete || Quote

GreyGhost
a ghost... only grey

Posts: 6858
Registered: 01-08

Didn't spot any nasties when I visited the Realm a short time ago, unless I'm already blocking all of them. As has been said several times in this thread, you should be fine if you disable javascript in your browser and virus check all downloads - not that the Bestiary's content appears to have been touched by the malware, it's just a worthwhile precaution.

01-28-13 07:18 #

Profile || Blog || PM || Email || Search || Add Buddy

IP || Edit/Delete || Quote

All times are GMT. The time now is 20:22.

Pages (4): « 1 2 [3] 4 »

Doomworld Forums > Classic Doom > Doom General > Something wrong with Realm667.

Show Printable Version |

Email this Page |

Subscribe to this Thread

Forum Rules:

You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

HTML code is OFF
vB code is ON
Smilies are OFF
[IMG] code is ON

< Contact Us - Doomworld >