Hacker after donations!!

There have been numerous trackers that have been hit by this hacker in the past day or 2.

He takes over a Sysops account and sends a Mass PM to all users, stating that if they donate $50 they will receive 1TB of upload onto their stats.

This is obviously false information, but quite a few have been caught out by this and donated to him.

Just be careful if you donate to a site, click the Paypal Logo and make sure the proper e-mail is there that the site usually uses.

I have heard he has hit quite a lot of sites.

This is just a heads up to be careful, there is no source, apart from me and what i have heard over the last 24 hours or so.

That's kinda sad to hear and noobie members. Thanks for noticing us!

Yeah, I saw BitSoup got hit by this same hacker apparently. Thanks for the warning.

It's a bit concerning that they can actually do that though. I'd like to feel more secure using a website.

Quote:

---

Originally Posted by stoi

There have been numerous trackers that have been hit by this hacker in the past day or 2.

He takes over a Sysops account and sends a Mass PM to all users, stating that if they donate $50 they will receive 1TB of upload onto their stats.

This is obviously false information, but quite a few have been caught out by this and donated to him.

Just be careful if you donate to a site, click the Paypal Logo and make sure the proper e-mail is there that the site usually uses.

I have heard he has hit quite a lot of sites.

This is just a heads up to be careful, there is no source, apart from me and what i have heard over the last 24 hours or so.

---

did he do it 2 black-cats

I assume he did, but it's a smart thing off the hacker cause usually sites who needs donations they get an email i.e.: [email protected]. Can't blame. :/

Thanks for the info!

No, he claimed he was in BCG to another tracker owner, but he wasnt.

Thanks for the heads up. Gotta slow down before I click on a button and make sure its legit.

Is it easy to exploit the BTdev system like that?

Thanks for the info

Thanks stoi for posting here and letting the users know.
The hackers using this paypal id:

[email protected]

Stay away from that paypal account, and if you've already sent money to that account please make sure you report it to paypal.

Quote:

---

Originally Posted by stoi

There have been numerous trackers that have been hit by this hacker in the past day or 2.

He takes over a Sysops account and sends a Mass PM to all users, stating that if they donate $50 they will receive 1TB of upload onto their stats.

This is obviously false information, but quite a few have been caught out by this and donated to him.

Just be careful if you donate to a site, click the Paypal Logo and make sure the proper e-mail is there that the site usually uses.

I have heard he has hit quite a lot of sites.

This is just a heads up to be careful, there is no source, apart from me and what i have heard over the last 24 hours or so.

---

yep i have also seen this massage on few sites..

Thanks for the heads-up bud!

:)

Thanks Stoi for keeping us in the know!

and now we talking abouth all this security of sites but when i see something like this when some hacker can very easily get sysop acc and all other info aswell.It seems some things will never change

Erm...how the hell is this guy managing to get sysop status? He must have found one hell of an exploit/hole. :ermm:

wow, this guy must be pretty good at what he does...

well hes not that good, as i have heard he wont be doing it again for awhile :shifty:

Quote:

---

Originally Posted by Zaxx

Erm...how the hell is this guy managing to get sysop status? He must have found one hell of an exploit/hole. :ermm:

---

Or he could be targeting the sysops directly...there are a number of ways he can steal their info then he just needs to log into their account and viola. This seems to me to be the most likely, though it's definitely possible for him to hack the site directly.

Quote:

---

Originally Posted by stoi

well hes not that good, as i have heard he wont be doing it again for awhile :shifty:

---

This shoudn't happend in this first place and u now telling that he is not good?..i can only guess since it seems he dont need much work to get what he needs.

and also this is just empty words like *he wont be doing it again for awhile* oh come on...(I'm talking in general for all this sites that been hacked )

thx for the info.

Thanks for the heads up I'll look out for him

Some sites are more secure than others, but come on, if a hacker can get into the FBI or NSA then im sure a torrent tracker will be a pretty easy target, doesnt matter how many scripts we have on there.

Nothing, and i mean Nothing is secure on the net, you might believe it is, but its not.

All we can do is plug all the obvious holes, and some not so obvious, some trackers obviously had a hole, others didnt, im pleased to say we didnt this time around.

This happened to one of my sysops last year.

Someone sent me and him a link, saying it was a replica site of ours, and someone was getting accounts/passwords getting members to sign into it.

Of course, he clicked the link (so did i will be honest but we went first) and it had a cookie grabber on. within 2 minutes he was locked out of his account, (even though we didnt know this till 30 minutes later) and we had a bit in the control panel, where you could execute MYSQL queries. (Which came with the source we were using btw, we didnt put it there).

so he just ran a truncate the database query, in a split second everything was gone, into thin air, and we didnt have any backups (we had just started a couple of months earlier, on the host we were on and with the source we were using).

The good part about this is, hopefully trackers that have been affected, and even those that have not, will look even more closely at their code, and fix any holes they see.

But nothing is unhackable if your good enough.

This sounds intersting, how do you take over a sysop acc anyway.

Quote:

---

Originally Posted by rogerse

This sounds intersting, how do you take over a sysop acc anyway.

---

you become owner :lol:

wow! he must be great hacker :P

i saw something similar happening at bitseduce

thanks for the heads up stio ;)

Quote:

---

Originally Posted by stoi

Quote:

---

Originally Posted by rogerse

This sounds intersting, how do you take over a sysop acc anyway.

---

you become owner :lol:

---

i LOL'ed:lol:

This guy must die:angry:

Thanks for the information provided.

Quote:

---

Originally Posted by FACE_TO_FACE

This guy must die:angry:

---

A little intense don't you think?

Quote:

---

Originally Posted by stoi

Quote:

---

Originally Posted by rogerse

This sounds intersting, how do you take over a sysop acc anyway.

---

you become owner :lol:

---

lmao on that one bro...:lol:

Someone smart enough should hack his paypal account.

damm those hackers

bitseduce has attacked as well

Quote:

---

Originally Posted by Zaxx

Quote:

---

Originally Posted by stoi

you become owner :lol:

---

lmao on that one bro...:lol:

---

No really thats how you do it :P
I there was a exploit on tbedv, regarding shoutbox, that let you become owner on the site. But its an extremely obvious one, so i most places get it patched.

Quote:

---

Originally Posted by fOrUmAs

This shoudn't happend in this first place and u now telling that he is not good?..i can only guess since it seems he dont need much work to get what he needs.

and also this is just empty words like *he wont be doing it again for awhile* oh come on...(I'm talking in general for all this sites that been hacked )

---

In your eyes this guy is probably good, but if you ask a real cracker he will tell you the opposite :lol:

Quote:

---

Originally Posted by SenorBubbz

Quote:

---

Originally Posted by FACE_TO_FACE

This guy must die:angry:

---

A little intense don't you think?

---

Yea, tht dikhead just needs to see a shrink he sounded really disturbed. Oh and he claimed to be on BMTV and BCG (confirmed by stoi its not true).

Quote:

---

[04:11] <boa> i do it for money my friend

[04:23] <boa> i am sysop in blackcats too


[04:34] <boa> i can get in any site
[04:34] <boa> the hardest was bitmetv
[04:34] <boa> but i got in there too

[06:44] <boa> i needed the money for my little sister she is ill <--made an imagenary sister LoL nutz!
[06:44] <boa> i cant pay doctor..

[07:36] <boa> u r a criminal and u will end in jail <-- a hacker calls me a criminal for running a torrent site LoL!

---

Yeah we had a message at Bitsoup about some crap going on....

another example from pisexy

http://www.pisexy.org/pimpie/drawimg.jpg

damn this hacker is good

I bet he sucks ass at fighting IRL. I could take him on, after 30 secs, he'd be lying on the ground.