Is this what took the forum down two weeks ago?

[pradeep1]

http://news.zdnet.com/2100-1009_22-5499725.html

[Scottes]

AFAIK, this was not involved. Pekka took the board down because of an attack that was using a bug in PHPBB to send phishing emails to users.

[tim]

It's related, I think. A website I run was hacked twice, once I installed the patch it was fine.

[pradeep1]

It seems like a ton of forums using phpBB got hit with this one. :cry:

[Pekka]

Who attacked this server was definitely a person, not a virus. Most likely a hacker group (who shared info). In short the URL bug in PHPBB was used to install (wget) a txt file (perl code) to /tmp, the file was run (also through PHPBB URL) and it installed a variation of IRC script with ability to run system commands. It opened a backdoor port. That port was accessed by telnet. Script process name was obfuscated. They were able to access the server for less than a day at most.

I have the script (it's actually still online in Brazilian website) and IP where the attack came from (in Brazil). But that really does not matter any more as the server security is hardened so much that e.g. above attack is not possible any more even with new yet unfound URL bugs.

[robertwgross]

Why don't we all fly down to Rio and bust some heads together?

---Bob Gross---

[tim]

How about we fly to rio, sit in the sun, and take pictures of the beautiful women? That's goTa be way more fun than busting heads :)

[bedeviler]

How about we fly to rio, sit in the sun, and take pictures of the beautiful women? That's goTa be way more fun than busting heads :)

I'd be doing more than taking pictures! Way, WAY more fun!

-bd

[Olegis]

How about we fly to rio, sit in the sun, and take pictures of the beautiful women? That's goTa be way more fun than busting heads :)

Count me in
;)

[cmM]

Why don't we all fly down to Rio and bust some heads together?

---Bob Gross---:D :) :lol:

POTN D-Day!