Page 1 of 1

vBulletin breach

Posted: Tue Nov 03, 2015 8:41 am
by Dr.Flay
IMPORTANT

vBulletin forums have been breached. If you use it, change your password and secret as soon as you can.
http://www.databreaches.net/vbulletin-f ... fo-stolen/

Remember, if you use vBulletin for your own forums, you may have joined theirs at some point in the distant past.
If you are a member of a forum that uses vBulletin (No we don't) the owner of the site or head of the clan may also have joined their forum.
Please inform them.

Re: vBulletin breach

Posted: Tue Nov 03, 2015 5:29 pm
by UT Sniper (SJA94)
I'm glad I use my own forums. :mrgreen:

Re: vBulletin breach

Posted: Thu Nov 05, 2015 10:35 am
by Carbon
https://forums.unrealtournament.com/ uses vbulletin (if I am not mistaken). I tried to log in yesterday to change my password and got a 404 error on the user settings page.

Re: vBulletin breach

Posted: Thu Nov 05, 2015 4:30 pm
by papercoffee
Carbon wrote:https://forums.unrealtournament.com/ uses vbulletin (if I am not mistaken). I tried to log in yesterday to change my password and got a 404 error on the user settings page.
Didn't notice anything there...

Re: vBulletin breach

Posted: Sat Nov 07, 2015 1:18 am
by rjmno1
Yes i did read a article about this on www.tweakers.net.
I think they did a atack on the official website or maby some forums.

http://www.vbulletin.com/

:wink:

Re: vBulletin breach

Posted: Sun Nov 08, 2015 8:46 pm
by Dr.Flay
For the moment mostly only people with an account at vBulletin have to worry.
vBulletin did issue updates for the affected versions within hours. Thankfully some newer systems are a cloud service, so their update is done.
If you use a site that uses vBulletin, do what I did and inform the admin.

The links below are the first report, and the resulting extended implications.

http://www.databreaches.net/vbulletin-f ... fo-stolen/

http://www.theregister.co.uk/2015/11/03 ... d_defaced/
http://www.databreaches.net/vbulletin-p ... -for-sale/
http://www.scmagazine.com/user-data-com ... e/451640/#
http://arstechnica.com/security/2015/11 ... y-attacks/