Golden Sun Hacking Community
May 25, 2019, 11:40:53 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News:
 
  Home   Forum   DC Wiki Help Search Calendar Downloads Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Important announcement regarding forum malware attack  (Read 3056 times)
0 Members and 1 Guest are viewing this topic.
Atrius
Programmer Extraordinaire
Web Host

Fear my blades

Veteran Member
*

Coins: 0
Offline Offline

Gender: Male
Emblems: Website Founder
Clan Position: Creation God of Sol
Posts: 1763

« on: March 21, 2017, 12:17:47 AM »

Hey everyone, I've got some bad news and some good news.


The bad news: It's just been discovered that goldensunhacking.net was infected with malware around the end of February in 2016.

The good news: There is no indication so far that the attacker was trying to target user data, or impact normal site visitors in any way.



I'm still sifting through everything to determine the damage, but fortunately what I've analyzed so far indicates that the attacker was just using our server as a proxy.  What that means is that they were masking their IP address as our server's to access other sites.  I haven't found anything yet that would indicate regular users of the site would have been impacted by the malware, but I will keep you updated if I discover anything that indicates otherwise.



21 Mar Update

I've found code that could have been used to redirect traffic coming in specifically from the search providers Google, Yahoo, MSN, AOL, and Bing, or replace all of the links on the site with different links for traffic coming from those same search providers.  It appears to have never been configured properly though, and would not have been functioning.  So far this is the only code I've found that could have impacted normal users, but again it would have required additional set up that was not performed, and would not have been functioning.

Although there are still no indications that user data was targeted, I'm continuing my analysis of all of the site's files to make sure, and will keep you informed.  I have no estimate for when I'll get the site up and running again, making sure everything is clean is my main priority right now.
« Last Edit: April 02, 2017, 01:59:26 PM by Atrius » Logged

I'm shaking my head in general disapproval of everything
View Profile WWW
Atrius
Programmer Extraordinaire
Web Host

Fear my blades

Veteran Member
*

Coins: 0
Offline Offline

Gender: Male
Emblems: Website Founder
Clan Position: Creation God of Sol
Posts: 1763

« Reply #1 on: April 02, 2017, 02:20:28 PM »

I've completed my clean up of the Malware, I'm pretty confident that we're clean now, additionally, I've made sure we have the latest security updates installed on the forum.

I'm still not sure how it happened in the first place, it's possible the attack didn't even originate on this site.  One of the dangers of using a shared hosting environment is that things can leak over from other sites on the server.  Regardless, I'm going to be keeping a closer eye on things for a while.
Logged

I'm shaking my head in general disapproval of everything
View Profile WWW
Pages: [1]   Go Up
  Print  
 
Jump to:  

Cbox
Today at 08:44:59 AM
ryancaesar12345: how to seperate isaac/felix and ivan sheba class index? how to edit enemy elemental stats power and resist? how to edit icons in psynergy or add a new icons? and how to change chance effects like agility drop 100%?
Yesterday at 05:24:27 PM
uaeip: how can i make those work? im noob http://forum.goldensunhacking.net/index.php?topic=2752.msg46171#msg46171
May 22, 2019, 09:32:43 PM
radzo73: is there a patch that skips dialogue? Interested in making a TAS...
May 12, 2019, 12:15:01 PM
raijinken: Hey there guys. Been a long time. But has anyone found out how to make a hard mode of Dark Dawn?
April 18, 2019, 01:18:08 AM
Fox: Thinking.... meme topics.....    Isaac: Stop calling me a sack! Also, don't call me sick either!
April 03, 2019, 08:24:45 PM
Fox: Really don't see the point in the Crystal or even the crown conversation, but whatever... (I mean, if you want to do it, then just do it. - Doesn't need to be at GSHC, because there are no longer clan leaders at GSHC.)
April 03, 2019, 03:59:33 AM
squizzy44: We all need to band together to take down Crystal.
April 02, 2019, 12:00:09 AM
Fox: Your clan?  You can't edit it manually, so you have to tell an admin so they can do it. There's actually a topic for when you pick a clan... but uhh... I've no idea if an admin will see it via that, though. (Kain will certainly see id you ping him on GSHC Discord.)
April 01, 2019, 05:28:42 PM
squizzy44: How do I change my position on my profile? I haven't used the site in nearly 10 years...
March 31, 2019, 10:10:15 PM
Fox: I still wonder if a Tret glitch for speedrunning exists... I don't think I looked into if the PC was on one of the other layers. (Which basically the second layer edits @-0x200 instead of @-0x100... in the event you are going up (y-axis) out of bounds.) Hm.
March 31, 2019, 06:18:43 PM
Fox: Not me.
March 31, 2019, 02:59:38 PM
Salanewt: I don't know of any, although if there were then we'd have to send it as a patch file. I think someone is working on it at least!
March 29, 2019, 07:51:48 PM
MaxiPower: no such thing exists
March 26, 2019, 03:38:42 AM
reeZ931: I would really appreciate it 
March 26, 2019, 02:39:38 AM
reeZ931: Anyone have a golden sun rom where you can play as saturos and menardi properly? 
March 25, 2019, 09:31:15 PM
Fox: It would explain why everyone leaves so quickly after taking our bananas.
March 24, 2019, 10:36:10 PM
Fox: Wouldn't bananas increase agility the more you have? Like... Diddy Kong Racing reference.
March 22, 2019, 11:19:11 PM
Average Wind Seer: Banana: Restores 50PP to user. Restores 40PP to Isaac if Jenna uses this item.
March 22, 2019, 09:57:53 PM
Salanewt: Lol. I mean, I am thinking of adding a banana item to GS so...
March 22, 2019, 09:48:42 PM
Fox: Ooh! Sala's back!  I think he wants a banana.  All this banana talk must have attracted him.

Affiliates
Temple of Kraden Golden Sunrise
Powered by MySQL Powered by PHP Powered by SMF 1.1.21 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!
Page created in 0.064 seconds with 21 queries.