[Omniscient]

Seems like someone is using the 2010 dump to bruteforce logins.

Back then a user table dump occurred and I was forced to close inactive accounts and force password changes on all upgraded members.

Today someone used that database to login to about 1000 accounts or more. Since I required all L33t/Ub3r to change passwords they only have credentials for regular and closed accounts which at the time I didn't bother to force a password change. My main concern at that time was securing upgraded accounts. Which we did. Took about a month to recover all the accounts that were stolen.

Back then we didn't require complex passwords and too many clowns used simple passwords like "password" and no, I'm not joking.

That dump floats around even today but it's value is nearly zero. Someone apparently took the time to unhash a buttload of account credentials and then bot the login page for the past few hours.

All they managed to do was make my evening interesting and I was able to tidy up the problem rather easily. They were able login to less than 100 open registered accounts which are all now closed. Only 2 inactive L33t accounts were stolen and those are closed now too. Not one Ub3r account was compromised.

Of course I took care of the bot as well. That won't be able to continue either.

I'm just letting members know your accounts are secured. There was some obvious weird online list with closed accounts which of course alerted us all. Thanks to those who brought it to my attention.

Silly skids...bruteforcing is for noobs.


(btw I think my grammar isn't so great in this post, kinda tired)

[Magicmann]

I was wondering what was up with all those closed accounts being online. Would have reported it had I not gone for a shower and food.

[Evanescence]

Great work Omni! Though I don't see why they would bother with closed or LQ accounts. 🤣

[Doxicity]

Why use a 2010 dump, wasn't there a 2012 dump?
I wasn't even registered in 2010 lol.
Good thing this doesn't effect the non-existent Chile members.

[Zyptic]

Looks like someone wanted to be in the oldfag crowd .

[Ifinger]

Blame it on the tired why don't ya!

[Baws]

It's 12 am Omni, why are you working so late?

Thanks for the laugh though, "silly skids...", lots of closed accounts. 👍

[Evanescence]

It's 12 am Omni, why are you working so late?

Thanks for the laugh though, "silly skids...", lots of closed accounts. 👍

It's 2am for me 🤣 I just woke up too

[Dr.Penguin]

Thanks for clearing this up Omni, I seen a couple threads about it. I was wondering WTF was going on XD!

[Omniscient]

Why use a 2010 dump, wasn't there a 2012 dump?

A completely different dump.

Though I don't see why they would bother with closed or LQ accounts.

I have a feeling they believed they'd get better quality accounts. I hope they spent days getting this together because took me less than an hour to negate it all.

Old accounts have some value to scammers for their age.

Though I don't see why they would bother with closed or LQ accounts.

I actually very often work till 2-3am.

[Evanescence]

A completely different dump.

I have a feeling they believed they'd get better quality accounts. I hope they spent days getting this together because took me less than an hour to negate it all.

Old accounts have some value to scammers for their age.

I actually very often work till 2-3am.

I think you accidentally quoted my post twice 😝

[630]

Good to hear. You think that by now people would pick a better password than password.

[Evanescence]

Good to hear. You think that by now people would pick a better password than password.

Exactly! Like "passw0rd"! The most secure password out there 😎

[InspectorGadget]

Although you say bruteforcing is for noobs - in the cryptology section there is a nice little pocket of members who activly help the community to try and crack any hash they are provided with. You may consider it noob-ish but it's probably one of the nicest threads on this forum.

Omni - https://hackforums.net/showthread.php?tid=4563893 - this thread might be somewhat related, maybe even a multiaccounter? A little odd that this happens and hours ago this guy comes along asking for hashes to be decrypted that belong to HF..

[Bubbles.]

I can't believe people used "password" as their password. That is asking to get your account stolen in seconds 🤣