Hacked

Linton · 11-15-09, 07:24 PM

I have a nokia n97 and I use opera to browse the web. I just tried to access this site and it took much longer than usual and a Saudi flag appeared along with a message saying hacked by (I didnt stay long enough to look!) So what has been hacked,subsim,opera,my isp? Help please!

Onkel Neal · 11-16-09, 08:40 AM

I don't know anything about it. Can you give more information?

Linton · 11-16-09, 08:46 AM

Late last night,I was using my phone to access the internet.I was trying to get on subsim but the page was taking ages to load and when it did appear I saw a Saudi flag and a message to say that I had been hacked.
My phone uses opera as its web browser and I think it had latched on to a neighbour's router to access the internet through the easy wi-fi app I have installed.

Onkel Neal · 11-16-09, 08:57 AM

What was the message? "Your phone has been hacked"? And you're sure it was a Saudi flag (I wouldn't have any idea what that flag looks like). Has it happened again?

This is all I can find at the moment.

Linton · 11-16-09, 11:42 AM

Neal,it said "you have been hacked by " then there was a name which was a combination of letters and numbers.As soon as I saw I it I left the page.It was definitely a green saudi flag.
The website airline pilot central.com also had a similar attack a while back.
http://www.airlinepilotforums.com/ca...et-hacked.html

Onkel Neal · 11-16-09, 01:09 PM

Ok, thanks. I will run a security sweep, and also have my server tech do the same.

Linton · 11-16-09, 01:50 PM

In my browser history I found "Hacked by alM511".If you google alM511 it comes up with a lot of sites that have been attacked by him.

Onkel Neal · 11-16-09, 04:22 PM

Ah, ok. I was checking for Sorb511 or something. I'll look for this too. Nothing so far.

Onkel Neal · 11-16-09, 11:29 PM

So far nothing here shows up as a problem. If the server was hacked, it would be persistent. The server tech who is working on this asked me to ask you:

When your visitors experienced this problem do we know which exact page they were on when it happened? (i.e Forum, the main index, one of the sub-sections etc) It might help us narrow it down if there actually is a problem.

Of course it could also be a javascript that been carried over from another site.

Dowly · 11-17-09, 06:29 AM

I highly doubt that this is an issue with subsim. With people visiting the page 24/7, I'm sure someone else would've noticed it aswell.

Onkel Neal · 11-17-09, 09:59 AM

From EZSM:

Quote:

Please let us know when you hear back from your customer on the exact url where he found the hack message.

We checked the whole server and could not find any suspicious process/files.
If the server was compromised, the hacked message will be consistent and anyone accessing the websites will see the hack message.

Linton · 11-17-09, 11:15 AM

I seem to remember I was on the opera mini book mark page and then selected the radiorooms page from my bookmark list.Normally when I am connected through a router the page loads quite quickly but this time the page was slow to load and I got the hacked page. The problem page has not reoccurred.

Linton · 12-18-09, 02:56 PM

I saw a story on the television news tonight about an attack on twitter.The image the attacker used was very similar to the one I saw when this site was attacked.
http://www.dailyfinance.com/story/co...army/19286787/

Onkel Neal · 12-18-09, 08:07 PM

Quote:

Originally Posted by Linton

....similar to the one I saw when this site was attacked.

When which site was atacked?

Task Force · 12-18-09, 08:22 PM

I think he is talking about subsim.

11-15-09, 07:24 PM	#1
Linton Sea Lord Join Date: Dec 2003 Posts: 1,898 Downloads: 0 Uploads: 0	Hacked I have a nokia n97 and I use opera to browse the web. I just tried to access this site and it took much longer than usual and a Saudi flag appeared along with a message saying hacked by (I didnt stay long enough to look!) So what has been hacked,subsim,opera,my isp? Help please! __________________ http://lintonsview.blogspot.com/

11-16-09, 08:40 AM	#2
Onkel Neal Born to Run Silent Join Date: Jan 1997 Location: Cougar Trap, Texas Posts: 21,289 Downloads: 534 Uploads: 224	I don't know anything about it. Can you give more information? __________________ SUBSIM - 26 Years on the Web

11-16-09, 08:46 AM	#3
Linton Sea Lord Join Date: Dec 2003 Posts: 1,898 Downloads: 0 Uploads: 0	Late last night,I was using my phone to access the internet.I was trying to get on subsim but the page was taking ages to load and when it did appear I saw a Saudi flag and a message to say that I had been hacked. My phone uses opera as its web browser and I think it had latched on to a neighbour's router to access the internet through the easy wi-fi app I have installed. __________________ http://lintonsview.blogspot.com/

11-16-09, 08:57 AM	#4
Onkel Neal Born to Run Silent Join Date: Jan 1997 Location: Cougar Trap, Texas Posts: 21,289 Downloads: 534 Uploads: 224	What was the message? "Your phone has been hacked"? And you're sure it was a Saudi flag (I wouldn't have any idea what that flag looks like). Has it happened again? This is all I can find at the moment. __________________ SUBSIM - 26 Years on the Web

11-16-09, 11:42 AM	#5
Linton Sea Lord Join Date: Dec 2003 Posts: 1,898 Downloads: 0 Uploads: 0	Neal,it said "you have been hacked by " then there was a name which was a combination of letters and numbers.As soon as I saw I it I left the page.It was definitely a green saudi flag. The website airline pilot central.com also had a similar attack a while back. http://www.airlinepilotforums.com/ca...et-hacked.html __________________ http://lintonsview.blogspot.com/

11-16-09, 01:09 PM	#6
Onkel Neal Born to Run Silent Join Date: Jan 1997 Location: Cougar Trap, Texas Posts: 21,289 Downloads: 534 Uploads: 224	Ok, thanks. I will run a security sweep, and also have my server tech do the same. __________________ SUBSIM - 26 Years on the Web

11-16-09, 01:50 PM	#7
Linton Sea Lord Join Date: Dec 2003 Posts: 1,898 Downloads: 0 Uploads: 0	In my browser history I found "Hacked by alM511".If you google alM511 it comes up with a lot of sites that have been attacked by him. __________________ http://lintonsview.blogspot.com/

11-16-09, 04:22 PM	#8
Onkel Neal Born to Run Silent Join Date: Jan 1997 Location: Cougar Trap, Texas Posts: 21,289 Downloads: 534 Uploads: 224	Ah, ok. I was checking for Sorb511 or something. I'll look for this too. Nothing so far. __________________ SUBSIM - 26 Years on the Web

11-16-09, 11:29 PM	#9
Onkel Neal Born to Run Silent Join Date: Jan 1997 Location: Cougar Trap, Texas Posts: 21,289 Downloads: 534 Uploads: 224	So far nothing here shows up as a problem. If the server was hacked, it would be persistent. The server tech who is working on this asked me to ask you: When your visitors experienced this problem do we know which exact page they were on when it happened? (i.e Forum, the main index, one of the sub-sections etc) It might help us narrow it down if there actually is a problem. Of course it could also be a javascript that been carried over from another site. __________________ SUBSIM - 26 Years on the Web

11-17-09, 06:29 AM	#10
Dowly Lucky Jack Join Date: Apr 2005 Location: Finland Posts: 25,005 Downloads: 32 Uploads: 0	I highly doubt that this is an issue with subsim. With people visiting the page 24/7, I'm sure someone else would've noticed it aswell.

11-17-09, 11:15 AM	#12
Linton Sea Lord Join Date: Dec 2003 Posts: 1,898 Downloads: 0 Uploads: 0	I seem to remember I was on the opera mini book mark page and then selected the radiorooms page from my bookmark list.Normally when I am connected through a router the page loads quite quickly but this time the page was slow to load and I got the hacked page. The problem page has not reoccurred. __________________ http://lintonsview.blogspot.com/

12-18-09, 02:56 PM	#13
Linton Sea Lord Join Date: Dec 2003 Posts: 1,898 Downloads: 0 Uploads: 0	I saw a story on the television news tonight about an attack on twitter.The image the attacker used was very similar to the one I saw when this site was attacked. http://www.dailyfinance.com/story/co...army/19286787/ __________________ http://lintonsview.blogspot.com/

12-18-09, 08:22 PM	#15
Task Force Rear Admiral Join Date: Jul 2008 Location: SPACE!!!! Posts: 10,142 Downloads: 85 Uploads: 0	I think he is talking about subsim. __________________ Task Force industries "Taking control of the world, one mind at a time"