I was recently contacted on my site by a fellow named omg1. He PM'ed me to tell me there is danger to my site and to email him at
. His avatar says script1. This was very suspicious to me so I contacted him and told him he should just tell me what the danger was in a PM. He still refused to tell me. Instead he wanted to chat with me in an online message so I did so. His name on chat was Evilthoutz...adding to the suspicion. He sent me a file which called joom_patch. He states he has already "helped" four icyphoenix based forums already. He told me to upload this file directly to /forum, again, bringing up that suspicion. I contacted Mighty Gorgon who looked at the file and confirmed it will allow this guy to take control of my forum. So needless to say I think it's necessary to let everyone here know about this guy as he is obviously targeting icyphoenix forum owners.
His behaviour seems to be to sign up on a site and then contact the owner on the same day. Not too bright really. He uses an avatar that says script1, it's hand written. His user name again on my site was omg1. His email address at the time is
though he may change this. His ip address is 72.49.177.6. I blocked everything in 72.49.*.*. I hate to do this but if he has dsl, he will have a dynamic ip address and it will change. Chances are he's just a script kiddy but I don't want to take that chance personally. I put a lot of hard work into my site and though it's backed up, it's a pain in the rear to clear out hackers.
I hope this gets to others before he gets to them. :*)
|
|
|||||
 
|
||||||||||||||||||||||||||||||||||||||||||||
