Database Breach - An Update

[Vinnythechin2010]

Your advertisement has been infiltrated by clicks virus website. Every time your webpage updates the advertisement space. One of the links sends the users webpage to another website. This is only occurring on your Fallout 4 website. I installed McAfee and now thankfully it blocks the web page from occurring.

 

Who do i contact to report this to?

McAfee reports them as "com-fr-l.net"

Previous experience was a redirect to a click.com site that was blank. Uses control restrictions so cant close the tab without task manager. Apparently impersonates Microsoft saying call 1-800 number.

[beary64]

Your advertisement has been infiltrated by clicks virus website. Every time your webpage updates the advertisement space. One of the links sends the users webpage to another website. This is only occurring on your Fallout 4 website.

I regret to inform you that i can confirm an attempted browser hijack on the front page as well.
You might want to talk with your ad provider, Dark0ne.

Edited February 7, 2016 by beary64

[Wolfman]

I received an email telling me that I had instigated a password recovery for this account. This is not the case (in actual fact, I had totally forgotten I had this account until I received the email). Is this related to the data breach in the OP?

[cabanaboy]

As an IT specialist (CompTIA A+, Network+, Security+ and CCNA certifications) I must say I'm impressed with the way you've handled this. MANY large corporations (Sony comes instantly to mind) have held a more nonchalant attitude toward network security and look where it leads. In my field the first thing we're taught is that companies will try to save money anywhere they can and the first place will be security... UNTIL THEY'RE BREACHED. What happens then is in direct relation to:

a) Value of data stolen

b) Cost to prevent a recurrence

c) Odds of a recurrence without further security measures

d) Publicity of the breach

Most of us (myself included) are guilty of easy to remember passwords. I don't have any vital data on this site but will be changing mine now.

For those interested, Microsoft has a great rule of thumb for creating passwords:

1) Minimum 8 characters

2) Must be alphanumeric (numbers AND letters)

3) Must use both upper and lower case (capital and small letters)

4) Must include at least one special character (!@#$%^&*)

DO NOT:

-use names or words that can be found in the dictionary

-use team names, player names or pet names

-use your birth date as part of the password

If all of the above is followed it would take a botnet of hundreds of computers several YEARS to crack your password. Choose to ignore ANY of the above and it could (potentially) be cracked in seconds.

Sorry for the long post.

 

[Losschabossdragon]

Thanks a great deal, your way of dealing with this breach is very professional. Keep up the good work.

 

cabanaboy​´s suggenstions are really good - maybe you could make them requirements for Passwords - i am just not so shure about the security of alpanumeric and lower and upper cases - because a hacker would use a Programm, so i dont know if a Password like 1Hello! is saver than a long one like onehelloexplanation . honestly i think that longer Passwords are saver than, but These are just my 5 cents

Edited February 10, 2016 by Losschabossdragon

[qoq]

There seems to be a common "university" theme going there.

I say just don't dl "Skyrimsupermod.exe" and it will be OK.

[qoq]

Good show!

[bben46]

@Wolfman - possibly, but your username could easily be guessed. I have seen people that decide they want a particular username try to get it and when they find it is not available try to steal the name using a password reset request. That is why the info is sent to the email that originally registered that account. - change your password to something not easily guessed and something not used on any other site.

[cabanaboy]

In response to Losschabossdragon, "the security of alphanumeric and lower and upper cases" think of it this way; if all passwords were 8 characters and you use numbers only my home pc could crack that in milliseconds (there's a maximum of 10 possibilities per character 0-9) with a total possible 1,073,741,824 combinations. Now add lower case letters = 36 possibilities (0-9 + a-z). Add upper case = 62 possibilities. Add 10 unique characters = 72. That does not mean it will take 7.2 times longer to crack. That's just one character! It has to guess the correct combination of characters. The possible combinations =1.0531229166855719e+65 (e65 means x10 with an exponent of 65) or 10,531,229,166,855,719,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000 A lottery ticket has far fewer possible combinations. You can confirm this here: http://www.csgnetwork.com/optionspossiblecalc.html

I hope that helps. :blush:

Edited February 11, 2016 by cabanaboy

[ninjakreborn]

You are one of the most thorough website administrators I've seen in a long time.