Infected DG Forum

[Steelthunder]

http://area51.phpbb.com/phpBB/viewtopic ... &sk=t&sd=a

Username = FuntKlakow

Few others out there as well. My board had them too.

Steel.

[Cory]

FuntKlakow is just a spam bot. It registers on forums that have Visual Confirmation disabled and posts a few messages containing links, that's it. This is not a phpBB specific problem, this would also work on other forum systems that have Visual Confirmation or other spambot protection disabled. phpBB, due to its popularity is simply the easiest target.

So, please activate Visual Confirmation if you didn't do it already and stay calm. There is nothing to worry.

Just another spambot. I don't really want to turn on visual confirmation unless I have to so we'll see what it does first.

[Steelthunder]

Yep.. I read that too.. then I read the rest of the thread which included:

FuntKlakow struck the Pweb Networks server last night with a DDoS and SQL corruption attack, destroying several MySQL databases and terminating access for at least 6 hours.

While we have not confirmed it is the original FuntKlakow, it has been 100% confirmed that he gained access via the hole in the phpBB 2 forums left by the original FuntKlakow script.

It was like a Hurricane, it destroyed everything in its path. Pweb Networks members are picking up the pieces tonight. Some places were beyond repair, like the MacForum Gallery (Coppermine).

I recommend you exercise caution and keep your security up-to-date.

Olympus is not affected by this security issue as a CVS installation we had runningwas untouched due to code changes in the Olympus system from phpBB 2.

So I turned on VC but I can understand why you'd prefer not to. Just an FYI.

[Cerberus]

Because he supports blind users.

[Ben]

Also, an increasing number of DG players are going blind by playing DG and staring at thier computer monitor for 48 hours straight at a time.

[Cory]

The phpbb version of capcha can be defeated by a surprising number of bots From what I saw the original maker of the bot can do this too. If I did turn it on, I'd rewrite it.