amuck-landowner

VPSAce hacked

Status
Not open for further replies.
R

RiotSecurity

New Member
So it appears VPSAce got hacked. They put up a maintenance page but there used to be a deface page up there.

Wanting to hear from the owners right now, waiting.....
 
Last edited by a moderator:
drmike

drmike

100% Tier-1 Gogent
We need to give Riot a media badge and credentials and have him start interviewing these people.  Non stop fun :)

Any idea of the hack nature, what was up on their site when defaced, etc.

VPSACE.... Hehe...

http://vpsboard.com/topic/2250-aim2game-b2-net-servermania-chris-niedojadlo-jerzy-niedojadlo-kevin-blanchard/?view=findpost&p=38091&hl=%2Bvpsace

http://vpsboard.com/topic/963-thread-for-buffalooed-to-investigate/?view=findpost&p=25713&hl=%2Bvpsace

I wonder if their other shell companies were smacked too...
 
R

RiotSecurity

New Member
Who knows? I'd rofl if they were though.

Their site was a ransom, I think it was $500 otherwise everything gets leaked.
 
Last edited by a moderator:
drmike

drmike

100% Tier-1 Gogent
RiotSecurity said:
Their site was a ransom, I think it was $500 otherwise everything gets leaked.
Click to expand...
Wonder what someone has or if it was just a website defacement.

Gosh, if someone leaked their info, everything I've said would be confirmed plus more :)
 
drmike

drmike

100% Tier-1 Gogent
Website now says:

We are undergoing routine maintenance, we will be back in 1-2 hours!
Sorry for any inconvenience!
~ The Management
Click to expand...

Routine maintenance... WTF does that even mean.  Why do people say that?  It's like, I pooped my pants... Oh never mind, it's just routine waste management.
 
drmike

drmike

100% Tier-1 Gogent
Anyone recognize this data schema?  Is this WHMCS?

INSERT INTO `tblclients`(`id`, `firstname`, `lastname`, `companyname`, `email`, `address1`, `address2`, `city`, `state`, `postcode`, `country`, `phonenumber`, `password`, `authmodule`, `authdata`, `currency`, `defaultgateway`, `credit`, `taxexempt`, `latefeeoveride`, `overideduenotices`, `separateinvoices`, `disableautocc`, `datecreated`, `notes`, `billingcid`, `securityqid`, `securityqans`, `groupid`, `cardtype`, `cardlastfour`, `cardnum`, `startdate`, `expdate`, `issuenumber`, `bankname`, `banktype`, `bankcode`, `bankacct`, `gatewayid`, `lastlogin`, `ip`, `host`, `status`, `language`, `pwresetkey`, `pwresetexpiry`, `emailoptout`, `overrideautoclose`) VALUES ('13', 'Andrew', 
 
Last edited by a moderator:
drmike

drmike

100% Tier-1 Gogent
Oh man.... Their source... ahhahaha

Code: 
<html>
<title>Maintenance</title>
<body>
We are undergoing routine maintenance, we will be back in 1-2 hours!<br>
Sorry for any inconvenience!<br>
~ The Management 
<!-- Just kidding we got hacked -->
</body>
</html>
 
R

RiotSecurity

New Member
drmike said:
Anyone recognize this data schema?  Is this WHMCS?

INSERT INTO `tblclients`(`id`, `firstname`, `lastname`, `companyname`, `email`, `address1`, `address2`, `city`, `state`, `postcode`, `country`, `phonenumber`, `password`, `authmodule`, `authdata`, `currency`, `defaultgateway`, `credit`, `taxexempt`, `latefeeoveride`, `overideduenotices`, `separateinvoices`, `disableautocc`, `datecreated`, `notes`, `billingcid`, `securityqid`, `securityqans`, `groupid`, `cardtype`, `cardlastfour`, `cardnum`, `startdate`, `expdate`, `issuenumber`, `bankname`, `banktype`, `bankcode`, `bankacct`, `gatewayid`, `lastlogin`, `ip`, `host`, `status`, `language`, `pwresetkey`, `pwresetexpiry`, `emailoptout`, `overrideautoclose`) VALUES ('13', 'Andrew', 
Click to expand...
Interesting little snippit you got there.
 
Status
Not open for further replies.
Top
amuck-landowner