Chreees Posted January 19, 2014 Share Posted January 19, 2014 Mind posting some screenshots? Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
A Sharrp SYBIAN Posted January 20, 2014 Share Posted January 20, 2014 If you log out, and then google "hookah forum" and click the 1st link you will understand what i am talking about. Someone has hacked the forum and put malware in its place. The only way to successfully get here to HF and log in is to type the full url. if you do any google search from a windows device you will get this screen. Here is the print screen i made. Also i having problems uploading certain pictures and files here i tried to make it smaller but that didnt work so im going to put this in tinypic and try linking it. Whoever hacked HF probably made it harder to upload pics so no 1 will be able to show this. ok lets hope the link works. Link to comment Share on other sites More sharing options...
Chreees Posted January 20, 2014 Share Posted January 20, 2014 Well fuck. Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
DrSmokes Posted January 20, 2014 Author Share Posted January 20, 2014 Yes, this still persists :( I'm telling you, you are likely hacked deeper and have backdoors from the first hack. Link to comment Share on other sites More sharing options...
Chreees Posted January 20, 2014 Share Posted January 20, 2014 Well I'll look into it again tomorrow. *sigh* Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
Fouda Posted January 20, 2014 Share Posted January 20, 2014 just got back on to check in on things and i received the redirect to :( but when i typed in the url it brought me straight to the site. I had a mini heart attack because i thought it had gotten sold as well. Link to comment Share on other sites More sharing options...
Chreees Posted January 20, 2014 Share Posted January 20, 2014 Great... This is some bullshit. We need IPBoard's support people in here it sounds like to clean up this mess, but I will see if there's anything I can do tomorrow at work on my down time. Thanks for hanging in there, folks. Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
Chreees Posted January 20, 2014 Share Posted January 20, 2014 Well, I got it to replicate the issue once by opening a private window and typing "hookah forum" into Google. Clicked our result, which shows up first, and it took me to the url4short.info shit. Hit back button and clicked it again and it came to HF just fine. What the hell... Link to comment Share on other sites More sharing options...
PJCrusader Posted January 20, 2014 Share Posted January 20, 2014 (edited) I've been getting those redirects for a year so. It happens from my work computer, home laptop, home PC, and my phone. Edited January 20, 2014 by PJCrusader Link to comment Share on other sites More sharing options...
DrSmokes Posted January 21, 2014 Author Share Posted January 21, 2014 Well, I got it to replicate the issue once by opening a private window and typing "hookah forum" into Google. Clicked our result, which shows up first, and it took me to the url4short.info shit. Hit back button and clicked it again and it came to HF just fine. What the hell... That's how the redirect works. If it detects your cookie for url4short, it will forward you right to the site. Link to comment Share on other sites More sharing options...
Chreees Posted January 21, 2014 Share Posted January 21, 2014 So it's being sneaky. I'm going to see if Mush can't get a hold of Adrock. Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
PJCrusader Posted January 21, 2014 Share Posted January 21, 2014 Also, it isn't aways just a hit back once and then go. Today I tried about 10-15 times and never got to the forum from the google search. Link to comment Share on other sites More sharing options...
Chreees Posted January 21, 2014 Share Posted January 21, 2014 I have asked Mush to contact Adrock and get IPB support on this pronto. We'll see what happens. Link to comment Share on other sites More sharing options...
Cloud-Hookah Posted January 24, 2014 Share Posted January 24, 2014 Guys this is getting worse and worse. Normally it only happened when on inprivate mode, but now I'm getting this for every single google search. Link to comment Share on other sites More sharing options...
Chreees Posted January 24, 2014 Share Posted January 24, 2014 Guys this is getting worse and worse. Normally it only happened when on inprivate mode, but now I'm getting this for every single google search. Seriously??? Jesus H. Christ. Adrock was online yesterday, did something cause the forum was offline temporarily, and me and someone else even tested it and both confirmed on the shoutbox that it wasn't redirecting us anymore. WHAT THE FUDGE IS GOING ON??? I want this damn issue fixed... Link to comment Share on other sites More sharing options...
DrSmokes Posted January 24, 2014 Author Share Posted January 24, 2014 I'm pretty sure the hackers have a backdoor. When they realize their URL redirect is no longer getting hits, they come in, use the backdoor, and make a change to something else to make it redirect. Link to comment Share on other sites More sharing options...
Chreees Posted January 25, 2014 Share Posted January 25, 2014 Adrock has alerted the site host and IPBoard. We should be good to go soon. Thanks for hangin in there, folks! Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
DrSmokes Posted January 26, 2014 Author Share Posted January 26, 2014 If it happens again, it will be due to 2 reasons: 1. The host didn't find the backdoor 2. The exploit is still there - either bc you are on an older version of IPB (?) or because a modification on the board is the issue. Link to comment Share on other sites More sharing options...
Chreees Posted January 26, 2014 Share Posted January 26, 2014 Well I believe Adrock did finally update the forum to the latest version. Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
InfernoRaven Posted January 27, 2014 Share Posted January 27, 2014 It hasn't fixed the issue I am getting redirected to http://url4short.info/183492a2 Mind you I have Ad-Block Plus and a bunch of other security plugins I had to disable a few to allow it to redirect me but yes it is still working as described above, redirect is redirects, however when you hit back and try again it works fine. Link to comment Share on other sites More sharing options...
InfernoRaven Posted January 27, 2014 Share Posted January 27, 2014 Well I will do a dreaded double post because my edit button has vanished completely. https://www.virustotal.com/en/url/cc0d66faff4bf23f131b9f3d70a6aca54b12ef4c5dc7c9daae34cc294b409186/analysis/1390793364/ It reports that said redirected site is a malware site too. I didn't see it attempt to download anything to my computer but watch where you click on that link previously posted. Link to comment Share on other sites More sharing options...
Cloud-Hookah Posted January 27, 2014 Share Posted January 27, 2014 Well I believe Adrock did finally update the forum to the latest version. Sent from my iPhone using Tapatalk Normally these types of hacks actually edit the theme file and put there link into the header or the index file. Link to comment Share on other sites More sharing options...
Chreees Posted January 27, 2014 Share Posted January 27, 2014 I'll dig around again today and see if I find anything. Word is Adrock's on it and IPB should be in sometime to fix it. Sent from my iPhone using Tapatalk Link to comment Share on other sites More sharing options...
Chreees Posted January 27, 2014 Share Posted January 27, 2014 Adrock has fixed the Google redirect issue! Link to comment Share on other sites More sharing options...
PJCrusader Posted January 27, 2014 Share Posted January 27, 2014 Looking promising. No redirects from my work computer or my phone today. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now