Main Page Redirect.

PirateKing

PirateKing

Likes Dirt
Everytime I try and load http://www.rotorburn.com/ I get redirected to the following address:

Code: 
http://sa-hacker.com/cookie.php?iddd=11879&bb_lastvisit%3D1307057342%3B%20bb_lastactivity%3D0%3B%20OAID%3D445cb733734dedcd0390636f611980bd%3B%20d41d8cd98f00b204e9800998ecf8427e%3D1307057421.5262335%3B%20__utma%3D40777505.1453087063.1307057464.1307057464.1307057464.1%3B%20__utmb%3D40777505.5.10.1307057464%3B%20__utmc%3D40777505%3B%20__utmz%3D40777505.1307057464.1.1.utmcsr%3Dgoogle|utmccn%3D%28organic%29|utmcmd%3Dorganic|utmctr%3Drotorburn%3B%20bb_forum_view%3D6959c9a4d79fa06193278b4caa942128bc8ed73aa-1-%257Bi-18_i-1307057472_%257D
Which is a Saudi hacker forum, this doesn't happen with any other webpage, and if I use the direct link I can get to the forum fine. It's just happened in the last 10 minutes or so. It isn't happening on any other webpage I try and go to, so I think maybe the problem might be on the front page? I've cleared cookies\cache\etc and use Linux so I don't think I've been hijacked on my end.

Can anyone else confirm the same issue?

Edit: Just tried it in a different browser firefox\chrome. Same thing.
 
Dozer

Dozer

Heavy machinery.
Staff member
I got the same but now it appears to be repaired.;) Thanks for the heads up y'all.

Update: Scott has also asked that you lot all change your passwords please.
 
Last edited:
Scott

Scott

bAdmin
Staff member
to change your password:

Up the top, where New Posts etc is, you'll see "Forum Actions" drop down menu. Click on general settings. On that page scroll down to "Edit Email & Password" on the left hand side. Common sense should steer you through the rest :)
 
Matt H

Matt H

Eats Squid
Scott, just a suggestion, some people might be using the same password on the forums that they do for their emails, banks etc. It might be a good idea to remind people in the notice that if they use their rotorburn password for other sites to change the others as well.
 
Scott

Scott

bAdmin
Staff member
From what I can tell the information was put in a place so that it could be easily retrieved, the data dump file however did not contain any personal information (including email addresses). Only account id numbers, some status fields and a ban reason (if there was one). The passwords themselves weren't actually in the file so it appears that they didn't even get the hashes of the passwords. Advising people to change their passwords is more of a precaution. Matt H, I will take your advice and update my notice.
 
T

tim_d

Likes Dirt
It could possibly be a coincidence, but my email account got hacked last night and sent viagra emails to my entire contact list, and it had the same password as I am using for RB.
I did change my password as soon as you put the notice up, but will definitely be changing it for all my accounts now. Just thought I'd give you the heads up, as it seems this might be related. Anyone else have this happen?

Tim
 
c3024446

c3024446

Likes Bikes and Dirt
I think i may have received the 2011 Total Security virus (the fake antivirus which demands $60 before you can use the internet, and disables all anti-Malware programs) from clicking a Rotorburn link from Google today. It has happened twice.

Has anybody had this happen?
 
Scott

Scott

bAdmin
Staff member
I guess it is possible that google cached our page at the time we had the hacked redirect. It was fixed within an hour of it coming up. Can you post a url of the search that led you to that link?
 
Scott

Scott

bAdmin
Staff member
Yeah I don't think it was any of those. This problem only affected our front page. The forums and all other pages escaped it.
 
Mattydv

Mattydv

Likes Bikes and Dirt
tim_d said:
It could possibly be a coincidence, but my email account got hacked last night and sent viagra emails to my entire contact list, and it had the same password as I am using for RB.
Click to expand...
It's a bit late I know, but this also got two of my email accounts - one Gmail and one Yahoo! Mail - so it wasn't isolated.
 
You must log in or register to reply here.
Top