nvrspk4
17-09-2008, 04:59 AM
Hello everyone,
Sorry for not posting on this sooner, we've been combing the site to ensure that everything is entirely secure. Earlier this afternoon an outgoing AGM's account was accessed through the revertion of an old email account that had passwords from long ago, when being saved during a computer switch. Basically, in a set of freak circumstances the AGM had their site account compromised at which point the "hacker" changes the password of several manager accounts and posted several Habbox Today and News Articles, as well as making some modifications to the Rare Values Page though not to the values.
There were no viruses whatsoever on the site and after investigation we have come to the conclusion that phishers were not actually placed on the site. For a period there was a login box - however that was a misstep by us when we were adding a password to a private directory and mistakenly added it to public_html, simply requiring password access for all. Rest assured no details were saved from that login box.
No member passwords were viewed (and cannot be viewed as they are entirely encrypted).
There was no real danger, just a minor inconvenience which we dealt with promptly, however we did want to let you know what happened and reassure you that everything is taken care of and is entirely safe.
In addition, it was claimed that the Rare Values Panel PW had been leaked, but the uber leet hackers overlooked the fact that the password is at least three or four generations old and has not worked for some time.
Thanks!
Sorry for not posting on this sooner, we've been combing the site to ensure that everything is entirely secure. Earlier this afternoon an outgoing AGM's account was accessed through the revertion of an old email account that had passwords from long ago, when being saved during a computer switch. Basically, in a set of freak circumstances the AGM had their site account compromised at which point the "hacker" changes the password of several manager accounts and posted several Habbox Today and News Articles, as well as making some modifications to the Rare Values Page though not to the values.
There were no viruses whatsoever on the site and after investigation we have come to the conclusion that phishers were not actually placed on the site. For a period there was a login box - however that was a misstep by us when we were adding a password to a private directory and mistakenly added it to public_html, simply requiring password access for all. Rest assured no details were saved from that login box.
No member passwords were viewed (and cannot be viewed as they are entirely encrypted).
There was no real danger, just a minor inconvenience which we dealt with promptly, however we did want to let you know what happened and reassure you that everything is taken care of and is entirely safe.
In addition, it was claimed that the Rare Values Panel PW had been leaked, but the uber leet hackers overlooked the fact that the password is at least three or four generations old and has not worked for some time.
Thanks!