Help tool compromised

[Hopeless]

Once again. Details have been leaked. They've taken it down. My friend who is very much in the know in this stuff told me and the fact help tool is down and it took people to a phishing site earlier.

[Pigperson]

Scary stuff, glad that I haven't used it recently. Thanks for the heads up :D

Will

[Ekelektra]

I used it today :l

That's not good news though hope it's not too serious!!

[Rainbow]

I used it today yesterday last week..great;ll

[Sonex]

I used it today yesterday last week..great;ll

Stop trying to steal peoples account.......JS JOKEZ

M8 this is teribl

[DPS]

LOL 2nd time this year....

[xxMATTGxx]

Sucks that the Help Tool has been attacked/whatever for the second time going. They should really improve on that area so it doesn't happen for a 3rd time.

I've noticed that they haven't done a news article about it either, I know you can't access the help tool but I thought they would want to let their users know.

[geo]

Oh this is really bad! :P

[Mathew]

Safest social network (http://www.habboxforum.com/showthread.php?t=722241) my arse.

[LoveToStack]

Safest social network (http://www.habboxforum.com/showthread.php?t=722241) my arse.

'Safest' used in that context is meant to be read as "least likely to get your kids bungled into a van", not about the security of the site.

Hilarious that this happens so often. Habbo can hardly keep peddling all the spiel about users doing their part to keep their own account safe when people could lose their accounts due to a lack of security on the other end.

[Michael]

Is the help site hosted by another website?

[Sonex]

http://www.facebook.com/media/set/?set=a.108499579262536.16718.100003074839125&type=3

H (http://www.facebook.com/media/set/?set=a.108499579262536.16718.100003074839125&type=3)ola

[Nick]

Hackers these days....

[sophiethenerd]

I reported someone today. Shizzzz....

[xxMATTGxx]

Looks like it's back for people to view.

[Red]

I reported someone today. Shizzzz....
it wasn't the call for help. It was the help tool.
Does anyone know if they managed to get into the help tool to see our details? :S

[GommeInc]

it wasn't the call for help. It was the help tool.
Does anyone know if they managed to get into the help tool to see our details? :S
I would hope they are seperate as there is literally no need to combine the two, but given Habbo is technologically feeble I wouldn't be suprised. For now assume IF people got into the help system, that they haven't got your details because Habbo cannot be that stupid.

[Zuth]

I've just had an email from then saying:


Hello!

You are receiving this email as you have recently been in contact with our Habbo Hotel customer service team and we would like to hear your feedback. Please click the link below and let us know whether or not our customer service team were able to meet your needs and expectations.

LINK

Thanks

Habbo Hotel Customer Service Team

The link was not the Habbo hotel customer service website, it was some dodgy link

[Hopeless]

That's terrible Zuth. They send that email to everyone who uses the help tool now and to think it has a malicious link. Oh God.

[Red]

I've just had an email from then saying:



The link was not the Habbo hotel customer service website, it was some dodgy link

ew :l ask a mod on the chf and change your email.

[Hopeless]

Wait a minute though. I bet the real link would be something dodgy anyway. They ask you to do a poll and Habbo always host polls on random sites. So maybe it wasn't malicious.

[Red]

I've used the helptool though and don't have one of those links :l

[Hopeless]

Everytime they reply to you you get an automated email asking to rate how useful they were etc. Started a few weeks ago.

[Toilet]

I've received these, if it's a http://digiumenterprise.com (http://digiumenterprise.com/answer/?sid=715806&chk=DFA6592P) link then there's nothing to worry about. Just hover over it to be sure.

[Hopeless]

Yeah, just looks weird because it's not Habbo but yeah that is the correct link. I wouldn't fill it out anyway. No point.

[scottish]

You might have all heard help tool was compromised. I can now confirm that everyone who has used help tool is at risk. Anything you've sent in... for example say you were banned and sent in all your account information (dob/emails/past emails) it has all been stolen. Believe me or don't but I'm being 100% serious.

Hide that furniz!

quote says it all

edit; it's still unsafe to use

Threads merge by Jordan (Forum Super Moderator): As both threads discuss the same problem

[Vinnie:Safety]

And immenseman is?
Where was the post originally from?

[Jake]

And immenseman is?
Where was the post originally from?

http://rob.nu/wp-content/uploads/2009/09/facepalm10.jpg

kk on a more serious note, niceeee

Edited by Jordan (Forum Super Moderator): Please do not post pointlessly

[Casanova]

WHO IS THIS IMMENSEBOY YOU SPEAK OF?

[Rozi]

ahah ok I don't mind
if they can unban my banned account for me though I'd be bare hapz
thanks

[scottish]

He's im men seman (http://www.habboxforum.com/member.php?username=immenseman)

[Vinnie:Safety]

Ok, so hes banned... who was he ? exactly.

[Red]

Jake is like the biggest liar I know so evidence pls.

[Casanova]

he's just another hx drama ***.

[scottish]

Well he posted it on another forum hence the quote so i believe him, especially as the help tool has been hacked constantly, wouldn't exactly take much for the people to take a look at the tickets.

[Kyle]

i can confirm this as true

[geo]

er i don't think i've ever sent in a ban appeal, so i hope i'm safe?

[beth]

w o w i love this immense fella whoever he is, what a wealth of knowledge.

[-:Undertaker:-]

Come to my hackzor bunker for safety.

I don't use the helptool anymore though, its just auto innit.

[Zuth]

I've just been talking to a mod via the CFH Tool, he asked me for information, link, when it was sent etc, he said hes passing it on to management...

[beth]

was bored so asked on cfh and got this reply:

http://mattgarner.net/upload/images/1320160398.jpg

[Red]

same I asked yday and they were like 'Your account is safe. Please do not worry :)'

[Hopeless]

A 10 minute search on sites I shouldn't be on confirms this as true. The guy has posted emails and tickets of some of the members on said site and he still has access. Change your email and do not send anymore in. I would give links but against the rules.

[Red]

wtf :{ I just got one of those survey invitations for the helptool. Are those real or fake?

[scottish]

was bored so asked on cfh and got this reply:

http://mattgarner.net/upload/images/1320160398.jpg

They're sulake employees, they'll cover sulakes ass, or as usually just have absolutely no idea about anything in general.

As the help tool has been compromised several times, it's only logical that the people doing so would take any information they can which would include all tickets etc. :p

[Hopeless]

Check emails. Got one earlier. Habbo confirming everything was stolen.

[Yonder]

On Sunday (October 30th, 2011) we noticed an unauthorized access to our English Habbo Help Tool at http://help.habbo.com. For a couple of hours, users who accessed the Habbo Help Tool were redirected to a fake Habbo site. However, the URL as seen in the browser's top bar was not http://www.habbo.com.

In addition, hackers were able to view information from the help requests sent through the Habbo Help Tool. The information that was accessed included your Habbo name and information that you wrote in the help request's further info field. Hackers did not get access to Habbo databases, nor access to Habbo password information.

We are now contacting each of the affected users individually, we have also contacted the police regarding this incident.

The Habbo Help Tool is now safe to use.

As a safety precaution we ask you to read our updated security guidelines, to keep your account secure: https://help.habbo.com/entries/20620061-security-guidelines-for-habbo-users

We are very sorry for the inconvenience, and look forward to welcoming you back to Habbo!

Kind Regards,

Habbo Staff

--
This message was sent by Sulake Corporation Oy, the company behind Habbo Hotel and is for users who have used Habbo Help Tool available at http://help.habbo.com

Email.

[Aaron]

Yeah I did post a thread about this the other day.

[Red]

omg didn't get that email but has anyone been spoken to individually yet? I used the help tool within last few days :{

[beth]

wow oops gg habbo. time for a security update methinks.

[Catzsy]

Seems that they will be replacing a lot of furniture again.

[xxMATTGxx]

The help tool isn't actually made by Habbo is it?
Sent from my 7 Mozart using Board Express

[-ry!]

got a email off staff




On Sunday (October 30th, 2011) we noticed an unauthorized access to our English Habbo Help Tool athttp://help.habbo.com (http://help.habbo.com/). For a couple of hours, users who accessed the Habbo Help Tool were redirected to a fake Habbo site. However, the URL as seen in the browser's top bar was not http://www.habbo.com (http://www.habbo.com/).

In addition, hackers were able to view information from the help requests sent through the Habbo Help Tool. The information that was accessed included your Habbo name and information that you wrote in the help request's further info field. Hackers did not get access to Habbo databases, nor access to Habbo password information.

We are now contacting each of the affected users individually, we have also contacted the police regarding this incident.

The Habbo Help Tool is now safe to use.

As a safety precaution we ask you to read our updated security guidelines, to keep your account secure:https://help.habbo.com/entries/20620061-security-guidelines-for-habbo-users

We are very sorry for the inconvenience, and look forward to welcoming you back to Habbo!

Kind Regards,

Habbo Staff

---------- Post added 01-11-2011 at 04:00 PM ----------

it also says
Change your Habbo passwords as a precautionary measure. While the attackers have not been able to see your password, some of the information they have seen, may help them guess it. on a help tool link, so im guessing they got to see our info. awkz

Threads merged by Jordan (Forum Super Moderator): Due to topic being discussed here already

[geo]

Oh god, thanks for this. I really don't want to change my password as I remember mine well. :(

[Vinnie:Safety]

That's gotta be the second best hack they've done :P

[-ry!]

There was 2 ppl who did it, and 1 of them is called *removed* on habbo lol

Edited by Jordan (Forum Super Moderator): Please do not accuse others of hacking

[Zuth]

The help tool isn't actually made by Habbo is it?
Sent from my 7 Mozart using Board Express

Says this at the bottom so I assume not:

Customer support software by Zendesk

[Velma.]

I'm glad there taking this seriously and getting the police involved.

[Toilet]

I received the email also, I guess they saw my tickets!!!!

[Mathew]

Yeah I got the email too, despite not sending a request into the Help Tool for months! :P I can't believe they actually owned up to the fact that they got hacked. Quite a big step from what we're used to! :P

[Muffings]

Well My friend said that if a website dont have https before the website then its a scam if it has http but... i dont think its true!

[scottish]

Well My friend said that if a website dont have https before the website then its a scam if it has http but... i dont think its true!

That's wrong lol

[Muffings]

That's wrong lol PROBS <3

[Muffings]

'Safest' used in that context is meant to be read as "least likely to get your kids bungled into a van", not about the security of the site.

Hilarious that this happens so often. Habbo can hardly keep peddling all the spiel about users doing their part to keep their own account safe when people could lose their accounts due to a lack of security on the other end.


WHY CAN'T THEY COME UP WITH THE PERFECT HELP TOOL THAT DOES NOT GET HACKED!

[xxMATTGxx]

WHY CAN'T THEY COME UP WITH THE PERFECT HELP TOOL THAT DOES NOT GET HACKED!

Habbo didn't make the help tool.

[Muffings]

Habbo didn't make the help tool.
WHY CANT SULAKE....?? MAKE A HELP TOOL THAT WORKS AND DOES NOT GET HACKED!

[scottish]

cause they'd have to hire people to make it and spend money on it, when they can outsource it and get it cheaper presumably.

[Muffings]

cause they'd have to hire people to make it and spend money on it, when they can outsource it and get it cheaper presumably.

Guess you got me there