Golden Sun Hacking Community
August 24, 2017, 10:24:51 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News:
 
  Home   Forum   DC Wiki Help Search Calendar Downloads Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Important announcement regarding forum malware attack  (Read 1342 times)
0 Members and 1 Guest are viewing this topic.
Atrius
Programmer Extraordinaire
Web Host

Fear my blades

Veteran Member
*

Coins: 1
Offline Offline

Gender: Male
Emblems: Website Founder
Clan Position: Creation God of Sol
Posts: 1754

« on: March 21, 2017, 12:17:47 AM »

Hey everyone, I've got some bad news and some good news.


The bad news: It's just been discovered that goldensunhacking.net was infected with malware around the end of February in 2016.

The good news: There is no indication so far that the attacker was trying to target user data, or impact normal site visitors in any way.



I'm still sifting through everything to determine the damage, but fortunately what I've analyzed so far indicates that the attacker was just using our server as a proxy.  What that means is that they were masking their IP address as our server's to access other sites.  I haven't found anything yet that would indicate regular users of the site would have been impacted by the malware, but I will keep you updated if I discover anything that indicates otherwise.



21 Mar Update

I've found code that could have been used to redirect traffic coming in specifically from the search providers Google, Yahoo, MSN, AOL, and Bing, or replace all of the links on the site with different links for traffic coming from those same search providers.  It appears to have never been configured properly though, and would not have been functioning.  So far this is the only code I've found that could have impacted normal users, but again it would have required additional set up that was not performed, and would not have been functioning.

Although there are still no indications that user data was targeted, I'm continuing my analysis of all of the site's files to make sure, and will keep you informed.  I have no estimate for when I'll get the site up and running again, making sure everything is clean is my main priority right now.
« Last Edit: April 02, 2017, 01:59:26 PM by Atrius » Logged

I'm shaking my head in general disapproval of everything
View Profile WWW
Atrius
Programmer Extraordinaire
Web Host

Fear my blades

Veteran Member
*

Coins: 1
Offline Offline

Gender: Male
Emblems: Website Founder
Clan Position: Creation God of Sol
Posts: 1754

« Reply #1 on: April 02, 2017, 02:20:28 PM »

I've completed my clean up of the Malware, I'm pretty confident that we're clean now, additionally, I've made sure we have the latest security updates installed on the forum.

I'm still not sure how it happened in the first place, it's possible the attack didn't even originate on this site.  One of the dangers of using a shared hosting environment is that things can leak over from other sites on the server.  Regardless, I'm going to be keeping a closer eye on things for a while.
Logged

I'm shaking my head in general disapproval of everything
View Profile WWW
Pages: [1]   Go Up
  Print  
 
Jump to:  

Cbox
August 20, 2017, 08:59:37 PM
Fox: Same... depending on whether they've used tricks instead or not.
August 20, 2017, 08:02:49 PM
Salanewt: I could see it counting.
August 20, 2017, 11:24:44 AM
Fox: Not sure if Zelda (LttP/Minish Cap) count or not...
August 20, 2017, 11:23:00 AM
Fox: Appararently, I can't think of many GBA games that do the psuedo-3D thing. (That being 2D maps with 3D-like collision...) Golden Sun and Superstar Saga come to mind, though... but I'll need to think about others, since it is quite possible i've simply forgotten....
August 19, 2017, 03:45:19 PM
Fox: Hmm... Thought: What if Isaac and co. weren't on Jupiter Lighthouse when Felix and co. were... I wonder if the story could have had a huge expansion, in this case.
August 18, 2017, 12:18:56 PM
Fox: Welcome back!
August 18, 2017, 09:12:43 AM
Luna_blade: back from vacation
August 17, 2017, 02:29:26 AM
Fox: That moment when you realize that there is a lot of chatting going on on Discord, that there is no point in trying to keep up. :P  Hm....
August 16, 2017, 04:50:22 AM
Fox: (Then again, just because posting is disabled, doesn't necessarily mean the buttons would be removed as well.)
August 16, 2017, 04:48:55 AM
Fox: (I mean, buttons I would expect to be similar to that.... rather than those specifically since I recall posting there to be disabled.)
August 16, 2017, 04:33:02 AM
Fox: Yeah... I like to think of it as a page loaded with ads. And it's not just the forum home page either... check the sub-forums/topics themselves. == New Topic/Reply/etc. buttons were affected.
August 15, 2017, 07:04:30 PM
Salanewt: Lol, nice. :P
August 15, 2017, 06:33:02 PM
Foxhttp://z9.invisionfree.com/Golden_Sun_Hacking/index.php? == Hahaha! GSHC Classic looks funny now that Photobucket killed the images. :P Anyway, how is everyone doing today?
August 14, 2017, 07:12:02 PM
Salanewt: So yeah, I'm typing up a non-academic essay on why GS2 was rushed; expect that sometime soon!
August 07, 2017, 05:53:11 AM
Fox: But anyway, such a hack mod is simply an idea, and I do not have any current plans to work on it at this time, so.....
August 07, 2017, 05:51:46 AM
Fox: Okay, cool. I think my idea works best without an ability to swap PCs (OR to just simply make that use it the PC's turn.) Hmmm... And with that, I question if a turn list is even needed with my approach. (Outside of maybe 1 entry, if that shortens the modifications.)
August 07, 2017, 05:13:26 AM
Salanewt: To be honest I've been thinking of expanding the battle turn section and also adding code for PCs to have more than two turns in the AI overhaul, but I probably won't allow anyone to have more than four.
August 06, 2017, 12:22:17 AM
Fox: Oh, and if that approach was taken = Would like to also have it so you select the spell to use when it is actually your turn rather than at round start.
August 06, 2017, 12:12:37 AM
Fox: Would take a lot of balancing, but I can see an adept being very slow, and yet very powerful.
August 06, 2017, 12:06:11 AM
Fox: And bosses can have an Agility that is above half of the maximum possible Agility. Mwahaha.

Affiliates
Temple of Kraden Golden Sunrise
Powered by MySQL Powered by PHP Powered by SMF 1.1.21 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!
Page created in 0.075 seconds with 21 queries.