MOA Forum Hacked?

bbolesaz · Jan 30, 2012

Got this from a club member. No idea of the validity or not.

http://www.cyberwarnews.info/2012/01/28/bmw-motorcycle-owners-of-america-hacked-and-thousands-of-accounts-leaked-by-xdev-b4lc4nh4ck/

20774 · Jan 30, 2012

Haven't heard of any issues. A few weeks back there was concern about some of the latest vBulletin sites having problems. We're not running the latest version, so we might be somewhat immune. But I'm sure, smarter people behind the scenes know more about what might have or have not been going on. Stay tune!

birdmanbmw · Jan 30, 2012

Might be a good time to change your password. I just did.

sherpamayberry · Jan 31, 2012

I noticed that wildcards are no longer being acknowledged in the search box ("*").

darrylri · Jan 31, 2012

Unfortunately, it's true

Please read more here: http://forums.bmwmoa.org/showthread.php?t=58115

A corresponding discussion thread is here: http://forums.bmwmoa.org/showthread.php?t=58114

rob nye · Feb 2, 2012

20774 said:
Haven't heard of any issues. A few weeks back there was concern about some of the latest vBulletin sites having problems. We're not running the latest version, so we might be somewhat immune. But I'm sure, smarter people behind the scenes know more about what might have or have not been going on. Stay tune!

MOA's version of VB is older software, running a version with known security flaws. At the least they need to be up to 3.8.5, right now it's 3.8.2.

And we pay an IT guy full time to watch over this stuff.

68159 · Feb 2, 2012

So the e-mail I've received from BMWMOA is legit ?????? I'm assuming everyone else received the same e-mail....

Omega Man · Feb 2, 2012

68159 said:
So the e-mail I've received from BMWMOA is legit ?????? I'm assuming everyone else received the same e-mail....

Yes, you can check post 5 in this thread.

James.A · Feb 2, 2012

I recieved a message last night from Brewmiester reporting the hack. I have changed my username and passorwd to what you now see. I am pleased to see that my avatar and other trite commentary has transferred.

Carry on.

birdmanbmw · Feb 2, 2012

James.A said:
I recieved a message last night from Brewmiester reporting the hack. I have changed my username and passorwd to what you now see. I am pleased to see that my avatar and other trite commentary has transferred.

Carry on.

I think you should edit your post and not tell us (the world) what your before and after was... just sayin'

montauk · Feb 3, 2012

I heard it from LDRider forum. Haven't received a mail from MOA on this. I took necessary precautions.

68159 · Feb 3, 2012

I wonder why not every member received an e-mail from BMWMOA

Are some of us more important than others :heh

rob nye · Feb 3, 2012

68159 said:
I wonder why not every member received an e-mail from BMWMOA Are some of us more important than others

I'm quite confident every member was sent an e-mail.

Some users are paranoid and put in bogus addresses.
Some users forgot to update an old address
Some users will have the message end up in their spam filter

If you want me to send you a copy directly send me a pm with your address.

tourunigo · Feb 3, 2012

68159 said:
I wonder why not every member received an e-mail from BMWMOA Are some of us more important than others

I got mine so maybe that means........ :brow

Changed my password though but keeping same username. Maybe we get a bit cavalier regarding any public forum (just think of all the stuff thousands of folks put on Facebook). Anyway, hope this all amounts to nothing more than a wake-up call. - Bob

wezul · Feb 3, 2012

Hey man if they steal my identity will they incur my debts as well?
I can pile some up right quick.
Just askin.

bullit7801 · Feb 4, 2012

68159 said:
I wonder why not every member received an e-mail from BMWMOA Are some of us more important than others

Rob Nye said:
I'm quite confident every member was sent an e-mail.

Some users are paranoid and put in bogus addresses.
Some users forgot to update an old address
Some users will have the message end up in their spam filter

If you want me to send you a copy directly send me a pm with your address.

And for more members than we want, we don't have an e-mail address on file. Of course, that is NOT true for forum users. To register for the forum, an e-mail address is required. Rob is right, thou, about the above. We hope all forum users find out about the hack and change their password.

tb

Omega Man · Feb 5, 2012

The example of listing the spam threads has been deleted at the request of the poster....The request from the MOD Team remains... Thanks.

The Mod team is on it and it isn't going to be fun PLEASE don't re-post threads and send members down the rabbit hole.
Attention if a member sees a suspicious site and it looks like the Moderators are not on it use the Report Post Button.
NEVER click on one of the links in one of these spam posts. They are most likely embedded re-directs.

dancogan · Feb 5, 2012

Hats off to the mods for responding so quickly. I awoke to find the forum was virtually filled with spam, some rather innocuous in content and some inappropriate. Less than 2 hours later it's apparently all gone. I'm sure it took someone or some team of people a fair bit of time to clean this up.

Will this continue, due to the recent hacking?

rob nye · Feb 5, 2012

dancogan said:
Hats off to the mods for responding so quickly. I awoke to find the forum was virtually filled with spam, some rather innocuous in content and some inappropriate. Less than 2 hours later it's apparently all gone. I'm sure it took someone or some team of people a fair bit of time to clean this up.

Will this continue, due to the recent hacking?

It will be a tough slog for a bit, me thinks.

While all the issues would be resolved in hours with a forum upgrade there is a very good chance that the interface between the forum and back end of the member management / e-commerce system would break.

I'm willing to wager that someone is doing validation testing on the interface with the latest version of VB but that takes time and money as one needs to set up a test lab discover any issues and then fix them before upgrading the DB.

In the interim I think the fastest way to stop the spam is to turn off the self-registration feature, all new forum logins would have to be validated by a human.

There are people working on this in the last few days the forum has been updated to 3.8.6. I'm confident they'll get this sorted out as quickly as they can. In the mean time kudos to the mods for rapid clean up.

Bobmws · Feb 5, 2012

This morning I saw all the spam crap on the forum and logged out. When I went to log in a few hours later, I got an error message that would not allow me to log in.
Submitted the lost password form and tried the new one, same error massage.
Now an hour or so later I can log in with the new password, but am unable to update it.
Is this part of the repair?

MOA Forum Hacked?

New member

Liaison

birdmanbmw

Guest

Ex-Camping guy

Cannonball Rider #52

Ritalin Poster Boy

Simpleman

Fortis Fortuna Adiuvat

James.A

Guest

birdmanbmw

Guest

New member

Simpleman

Ritalin Poster Boy

New member

Cage Rattler

Can't Grow It?? Mow it!!

Fortis Fortuna Adiuvat

New member

Ritalin Poster Boy

Curmudgeon At Large

Similar threads