2cpu

Foxie3a · 08-23-04, 08:23 PM

One of my favorite forums, 2CPU looks like its been hacked!

Go look at the site. This pisses me off. Anyone else ever witness something similar?

Captain Newbie · 08-23-04, 08:32 PM

*shrug* They're a damn good outfit.

They shall return!

Foxie3a · 08-23-04, 08:48 PM

I guess they pulled the site down.

At first it said

<html dir="rtl"><head>
<meta http-equiv="Content-Language" content="ar-qa">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">

<title>ﺪﻴﻟﻮﻟﺍ ﻮﺑﺃ ﺔﻄﺳﺍﻮﺑ ﻕﺍﺮﺘﺧﻹﺍ ﻢﺗ</title><bgsound src="http://alsayyaf552.jeeran.com/james.mid" loop="-1"></bgsound>
<meta name="description" content="http://alsayyaf552.jeeran.com/james.mid"></head>

<body bgcolor="#000000">



This site has been KicKED BY


Abo_alwaleed


<img border="0" src="index.php_files/james.JPG" width="268" height="306">
SBesT
WishES To YoU ADmiN

<a href="mailto:L3R@hOtMaIL.CoM">
L3R@hOtMaIL.CoM</a>

GaME OvER

</body></html>

Remove · 08-23-04, 10:06 PM

I actually recieved 2 emails from "webmaster@2cpu.com" that contained rar files. I immediately quarrantined them and saved them for future reference shall it be needed in a court of law since I have NEVER recieved anything from "him" before.

Goes to show how many pathetic losers there are out there!

EDIT: Just found this on their site:

That email is not for you. Really. I mean it.
By Forge on Monday, August 23, 2004 at 10:55 PM EST [ Post A Comment ] #3219

As you may or may not have noticed, the site became unreachable for a few minutes at around 22:45 EST tonight. We've had a security breach of unknown severity, and an email seems to have been sent to most everyone registered for the forums, claiming to be from 'webmaster@2cpu.com' and babbling something about 'Yaser Arafat' and exhorting you to click a link.

Please don't, that's not from me or anyone else official, I swear.

Changing your passwords might not be a bad idea, but we still don't know exactly how much damage was done. More info will be posted as available. Jim is burning all the midnight oil he can find in order to get things back to normal ASAP, and I know we all appreciate your patience and understanding as we get the house back in order.

Foxie3a · 08-24-04, 12:07 AM

I didn't get any emails. I wonder why I am special. :/

2CPU is still down. I get "Quote Roth 404" or something to that effect when I try loading the page.

Maybe each forum should have a different password from now on. Gotta get to work on changing all my passwords now.

MadSkillzMan · 08-24-04, 01:49 PM

i was just sent a virus from them! Said "see yoser laugh!" and it was "yoser.scr" i KNEW it was a virus..but heres the scary thing....sbc didnt detect it, NORTON CORPORATE DIDNT DETECT IT!!!

i wasnt dumb enough to run it though.

08-23-04, 08:23 PM	Thread Starter #1
Foxie3a Normal Member Join Date: Sep 2003 Location: Modesto, CA	2cpu One of my favorite forums, 2CPU looks like its been hacked! Go look at the site. This pisses me off. Anyone else ever witness something similar? __________________ Dual Xeon X5482 E0 3.2/12M/1600 (400x8 1.26v) Supermicro X7DWA-N, 14GB ECC/Fully Buffered (400, 5-5-5, 1.8v) Radeon 5770 1GB Triple LCDs (22/22/24") Boot: 5x SAS/15K Drives in RAID5 (~350mb/s) Storage: 17 hard drives from 10K to 15K RPM. All SCSI Hot Swap. PCP&C 1.2KW Single 12v, 90A Rail Auzen X-FI Prelude <- Digital -> Denon Receiver -> Sennheiser HD650 Headphones.
	QUOTE Thanks

08-23-04, 08:32 PM	#2
Captain Newbie Senior Django-loving Member Join Date: Jan 2004 Location: Right seat with a bored "don't kill me" expression	shrug They're a damn good outfit. They shall return! __________________ B.S. Computer Science, B.A. Political Science \| Commercial Pilot Airplane Single and Multiengine Land, Instrument Airplane "And, while with silent lifting mind I've trod The high untresspassed sanctity of space Put out my hand, and touched the face of God." Strong * Focused * Safe Apple Mac Pro 4,1, Two Nehalem Xeons 2.26GHzx4 (Hyperthreaded), 12 GB DDR3 FBDRAM \| MacBook Pro 15" (2009)
	QUOTE Thanks

08-23-04, 08:48 PM	Thread Starter #3
Foxie3a Normal Member Join Date: Sep 2003 Location: Modesto, CA	I guess they pulled the site down. At first it said <html dir="rtl"><head> <meta http-equiv="Content-Language" content="ar-qa"> <meta http-equiv="Content-Type" content="text/html; charset=windows-1256"> <title>ﺪﻴﻟﻮﻟﺍ ﻮﺑﺃ ﺔﻄﺳﺍﻮﺑ ﻕﺍﺮﺘﺧﻹﺍ ﻢﺗ</title><bgsound src="http://alsayyaf552.jeeran.com/james.mid" loop="-1"></bgsound> <meta name="description" content="http://alsayyaf552.jeeran.com/james.mid"></head> <body bgcolor="#000000"> <p align="center"> <span style="font-weight:700 ; background-color: rgb(0,0 ,0 );" lang="en-us"> <font face="Roman" size="7" color="#ff0000">This site has been KicKED BY</font></span></p> <p align="center"> <span style="font-weight:700 ; background-color: rgb(0,0 ,0 );" lang="en-us"> <font face="Roman" size="7" color="#ff0000">Abo_alwaleed</font></span></p> <p align="center"> <img border="0" src="index.php_files/james.JPG" width="268" height="306"></p> <p align="center"><b><span lang="en-us">S<font face="Roman" size="7" color="#ff0000">BesT WishES To YoU ADmiN</font></span></b></p> <p align="center"><b><span lang="en-us"> <font face="Roman" size="7" color="#ff0000"><a href="mailto:L3R@hOtMaIL.CoM"> L3R@hOtMaIL.CoM</a></font></span></b></p> <p align="center"><b><span lang="en-us"> <font face="Roman" size="7" color="#ff0000">GaME OvER</font></span></b></p> </body></html> __________________ Dual Xeon X5482 E0 3.2/12M/1600 (400x8 1.26v) Supermicro X7DWA-N, 14GB ECC/Fully Buffered (400, 5-5-5, 1.8v) Radeon 5770 1GB Triple LCDs (22/22/24") Boot: 5x SAS/15K Drives in RAID5 (~350mb/s) Storage: 17 hard drives from 10K to 15K RPM. All SCSI Hot Swap. PCP&C 1.2KW Single 12v, 90A Rail Auzen X-FI Prelude <- Digital -> Denon Receiver -> Sennheiser HD650 Headphones.
	QUOTE Thanks

08-23-04, 10:06 PM	#4
Remove Join Date: Jun 2003 Location: Zakk plays louder than FN Satan	I actually recieved 2 emails from "webmaster@2cpu.com" that contained rar files. I immediately quarrantined them and saved them for future reference shall it be needed in a court of law since I have NEVER recieved anything from "him" before. Goes to show how many pathetic losers there are out there! EDIT: Just found this on their site: That email is not for you. Really. I mean it. By Forge on Monday, August 23, 2004 at 10:55 PM EST [ Post A Comment ] #3219 As you may or may not have noticed, the site became unreachable for a few minutes at around 22:45 EST tonight. We've had a security breach of unknown severity, and an email seems to have been sent to most everyone registered for the forums, claiming to be from 'webmaster@2cpu.com' and babbling something about 'Yaser Arafat' and exhorting you to click a link. Please don't, that's not from me or anyone else official, I swear. Changing your passwords might not be a bad idea, but we still don't know exactly how much damage was done. More info will be posted as available. Jim is burning all the midnight oil he can find in order to get things back to normal ASAP, and I know we all appreciate your patience and understanding as we get the house back in order. __________________ Steve: Yeah, I'm just waiting for Keith's wife to die from lupus and then we're gonna get an apartment together. HEATWARE
	QUOTE Thanks

08-24-04, 12:07 AM	Thread Starter #5
Foxie3a Normal Member Join Date: Sep 2003 Location: Modesto, CA	I didn't get any emails. I wonder why I am special. :/ 2CPU is still down. I get "Quote Roth 404" or something to that effect when I try loading the page. Maybe each forum should have a different password from now on. Gotta get to work on changing all my passwords now. __________________ Dual Xeon X5482 E0 3.2/12M/1600 (400x8 1.26v) Supermicro X7DWA-N, 14GB ECC/Fully Buffered (400, 5-5-5, 1.8v) Radeon 5770 1GB Triple LCDs (22/22/24") Boot: 5x SAS/15K Drives in RAID5 (~350mb/s) Storage: 17 hard drives from 10K to 15K RPM. All SCSI Hot Swap. PCP&C 1.2KW Single 12v, 90A Rail Auzen X-FI Prelude <- Digital -> Denon Receiver -> Sennheiser HD650 Headphones.
	QUOTE Thanks

2cpu

Internet Services

Website Development

Tech Hardware

08-24-04, 01:49 PM	#6
MadSkillzMan Member Join Date: Nov 2003 Location: Cleveland OHIO	i was just sent a virus from them! Said "see yoser laugh!" and it was "yoser.scr" i KNEW it was a virus..but heres the scary thing....sbc didnt detect it, NORTON CORPORATE DIDNT DETECT IT!!! i wasnt dumb enough to run it though. __________________ Mian rig 2 x Dual G5 1.8ghz @ 29C :eek: 3gb ram 2x160GB Sata 1x250GB IDE ATI 9600, dual monitors - 19" AOC LCD's, 42" RCA Plasma! OC'ed Super Drive (8x SL to 16x DL, i heart firmware flash) Backup Rig: 4 x Dell Optiplex G270 2.8ghz HT 1Gb ram iPod Touch 3.1.2 Jailbroken! OSX 5.8
	QUOTE Thanks