ID: IRCNE2013112022
Date: 2013-11-22
IDG News Service - A group of hackers claim to have exploited an undocumented vulnerability in the vBulletin Internet forum software in order to break into the MacRumors.com and vBulletin.com forums.
On Friday, vBulletin Solutions, the company behind the vBulletin software, reset the passwords for all accounts on the vBulletin.com support forums after confirming that hackers broke into its systems and stole customer log-in credentials.
"Very recently, our security team discovered sophisticated attacks on our network, involving the illegal access of forum user information, possibly including your password," Wayne Luke, the technical support lead at vBulletin Solutions, said in a message posted on the forum. "Our investigation currently indicates that the attackers accessed customer IDs and encrypted passwords on our systems."
Luke advised users to choose a new password that they're not using on any other websites.
The announcement came a day after a group of hackers calling themselves the Inj3ct0r Team announced in a post on Facebook that they compromised the vBulletin.com and MacRumors.com forums.
Inj3ct0r Team claims to have found and exploited a previously unknown -- zero-day -- remote code execution vulnerability affecting all versions of vBulletin 4 and 5 and which allowed them to upload a Web shell on the vBulletin.com server, gain root access to it and download the site's database.
- 2