Habbox DOT com ~ Site

[GoldenMerc]

Hi,

So just sort of confuesed at the minuite with this annoucement;
http://www.habboxforum.com/showthread.php?t=750209
Which says;

We are currently aware of the problems people are facing with Habbox.com. If you go to the website and you get a Java Warning then DO NOT RUN the java or EXE application under any circumstances.

We recommend EVERYONE resets their passwords for any services that use the same password as their Habbox.com account and to reset their Habbox.com passwords once we give the go ahead after regaining control of the domain.

Update (22:41): We have suspended the Habbox.com website while we deal with the situation.

Update (23:14): We are currently working with Namecheap to try and resolve the issue. The issue is with the Habbox.com DNS information and NO information has been leaked from our servers or databases unless you put your information into the site during this time.

Update (00:41): Whilst normally a second person would have access to the domain accounts, it has been rather unfortunate timing and as such we are currently waiting for news from Sierk.

Update (11:08): We have made contact with Sierk and anticipate Habbox coming back online soon.

Pretty much it runs a exe file into your pc, guess that's extremely dangerous but how did this all happen, how did Habbox get so badly comprimised. You said you were working with NameCheap to resolve the issue, what issue?
Ross

[Recursion]

Read the second update in that post...

Basically they managed to convince Namecheap to point the habbox.com domain elsewhere... someone made a clone of the Habbox.com site on their own server (and did a terrible job, tbh).

[xxMATTGxx]

Read the second update in that post...

What he said, I'll quote it so you can see it clearly:

Update (23:14): We are currently working with Namecheap to try and resolve the issue. The issue is with the Habbox.com DNS information and NO information has been leaked from our servers or databases unless you put your information into the site during this time.

[GoldenMerc]

Read the second update in that post...

The issue is with the Habbox.com DNS information and NO information has been leaked from our servers or databases unless you put your information into the site during this time.

Hardly explain's anything?

[xxMATTGxx]

Hardly explain's anything?

Basically they managed to convince Namecheap to point the habbox.com domain elsewhere... someone made a clone of the Habbox.com site on their own server (and did a terrible job, tbh).

[GoldenMerc]

Im sure this has happened before, actually im really sure this has happened before. How the hell are namecheap believing this crap, Im fairly sure this should be taken to court, its up to Jin at the end of the day but that's terreble security.

[Nick.]

So your domain provider basically let a stranger change the DNS? Wow.

[Kieran]

Im sure this has happened before, actually im really sure this has happened before. How the hell are namecheap believing this crap, Im fairly sure this should be taken to court, its up to Jin at the end of the day but that's terreble security.

The domains are still owned by Sierk, not Jin which is why it is taking some time to regain complete control of the DNS servers.

So your domain provider basically let a stranger change the DNS? Wow.

Pretty much.

[GoldenMerc]

Bit crazy how namecheap allowed this to happen, i'd expect a misunderstanding like this to come from a smaller site etc, but a huge site like NameCheap... bit disapointing. As i said i thought this happened before, surely there is a way to prevent this from happening e.g To get your password back for your NameCheap account you can attach a home phone number or something?!

[Kieran]

Bit crazy how namecheap allowed this to happen, i'd expect a misunderstanding like this to come from a smaller site etc, but a huge site like NameCheap... bit disapointing. As i said i thought this happened before, surely there is a way to prevent this from happening e.g To get your password back for your NameCheap account you can attach a home phone number or something?!

It's not quite as simple as that. With Sierk still having control of the domains it took some time for Jin to get hold of him. Thankfully he has managed to do so now. I'd anticipate the domain being back in Sierks control at some point this afternoon. If Jin had ownership it wouldn't have taken so long as we are in easy contact with him.