Site Hack Attempt

[Makrell]

You guys are great. Good job and all that stuff

[alQamar]

You didn't read this at all did you?




It wasn't a proxy.

Your data revealed he was using Firefox or perhaps Chrome which is pretty famous in Europe (at least FF).
How do you know he was not proxying or otherwise obfuscating his IP, GED?

[GrnEyedDvl]

Because I can resolve the IP to a known internet provider, not a proxy server. That doesn't mean it wasn't malware on someone's machine allowing him to go through them, but it wasn't a proxy.

[z3n]

Maybe this has been mentioned before but here's an idea (though I'm not entirely certain on whether it's possible or not) but place a limit on IP's accessing administrator accounts to only one per day/12 hours or whatever number you deem best?

[John Doe]

It's not linked to the site hack attempt, but I keep getting js.js pop up each time I come on twc. Google tells me it's not welcome.

Spoiler Alert, click show to read: 

[Squid]

Maybe this has been mentioned before but here's an idea (though I'm not entirely certain on whether it's possible or not) but place a limit on IP's accessing administrator accounts to only one per day/12 hours or whatever number you deem best?

Not practical since I connect routinely from at least 3 IPs, more if I'm on a mobile device, and I'm not the only admin who connects from multiple places.

It's not linked to the site hack attempt, but I keep getting js.js pop up each time I come on twc. Google tells me it's not welcome.

I'd do a full anti-virus/anti-malware scan. Is it just on TWC or does it happen on other sites as well? If only on TWC it might be a bad ad and we'd need to know which ads are running when you get that message.

[John Doe]

I'd do a full anti-virus/anti-malware scan. Is it just on TWC or does it happen on other sites as well? If only on TWC it might be a bad ad and we'd need to know which ads are running when you get that message.

Just TWC, I'll take a pic of the ad next time. Do you need a right click/property on the ad as well?

[z3n]

Alright- multiple devices but from the same provider?

[GrnEyedDvl]

Not practical since I connect routinely from at least 3 IPs, more if I'm on a mobile device, and I'm not the only admin who connects from multiple places.

Yeah me too. I use more devices than I care to count, from more cities than I care to count.

Alright- multiple devices but from the same provider?

That wouldnt work at all. I bet I have connected from 10 cities with as many providers just in the last year alone. I travel quite a bit.

[z3n]

Of course, but I'm suggesting only one provider per day/within 12 hours or whatever time would be best- not the same year.

[Toho]

One question... what is the point of hacking TWC?
what benefit is there? barely anything of actual monetary value is here. No credit card or bank account numbers, no real name/address, no personal information like Social Security Number or Passport number/code.
So why in gods name hack this site? to screw with some modders? revenge for being banned? trolling?

Edit: So after reading page 2:

Is it really some hacker wannabe who wants to test their skills? Man... that guy though aren't there websites out there for people like him who want to test their skills?

[John Doe]

today is different, I tried several times and I only get that when the ad on the right side is blank, regardless of the 2 ads in the top banner.

Spoiler Alert, click show to read: 

[IZob]

One question... what is the point of hacking TWC?
what benefit is there? barely anything of actual monetary value is here. No credit card or bank account numbers, no real name/address, no personal information like Social Security Number or Passport number/code.
So why in gods name hack this site? to screw with some modders? revenge for being banned? trolling?

Edit: So after reading page 2:

Is it really some hacker wannabe who wants to test their skills? Man... that guy though aren't there websites out there for people like him who want to test their skills?

Most hackers go after three things when hacking a website: email addresses, passwords and other stuff that is private to your account (such as Private Messages).

I suspect finding valuable private information, especially in a forum such as TWC, to be extremely rare. But with an email and password a hacker can do things like:

Try to access your account on other sites such as Facebook, GMail, Bank Websites, etc....

Now that wont work if you use a different password and/or email address - etc. But not everyone does this.

Ofcourse it could be just a test. It could be for fun. It's hard to say.

[John Doe]

Isn't this part of the site unavailable to guest?

Spoiler Alert, click show to read: 

[GrnEyedDvl]

No, it never has been since its news about the site.

[Dromikaites]

He was probably attempting to discover the identity of some member and he hoped to achieve that by finding that person's email address.

That's the only reason for trying to hack a site like TWC. Somebody must be very pissed off with somebody else here.

[Plain Speaking]

It's not linked to the site hack attempt, but I keep getting js.js pop up each time I come on twc. Google tells me it's not welcome.

Spoiler Alert, click show to read: 

I get the exactly the same message, (i.e. "do you want to open or save js.js from pixel.mathtag.com"), when I log onto the TWC, even when logging on from a number of different pc's.

I first noticed this yesterday when I tried to download the Darthmod for NTW with links to a server (moddb) direct from TWC. I have been wondering if TWC has been infected with malware?

Isn't it likely Hackers may target this very popular and trusted forum to spread infected files?

[Roma_Victrix]

The most appropriate video you could possibly post here. I do love me some Archer.

Thanks for sharing the story of the failed hack, GED.