lol wut?

poninja · 14 Aug 2008, 19:39

i just got in and say this weird thing :S

i marked in green the weird usernames, and i checked some of them and almost all where private messaging :S

WormGod · 14 Aug 2008, 19:53

If you look above those usernames:

quoted:

Most users ever online was 558, 28 Jan 2005 at 17:04.

*Splinter* · 14 Aug 2008, 19:53

Spambot-age

I got a pm from barosanu

quoted:

Originally Posted by WormGod

If you look above those usernames:

?

iCarbonX · 14 Aug 2008, 19:55

I wonder if the people that have hacked Dream17 have done something here

farazparsa · 14 Aug 2008, 20:41

If you look pretty deep, you can find the thread I made on Jan 28 '05 about us beating the record. It was awesome, we beat it twice!

Paul.Power · 14 Aug 2008, 20:56

quoted:

i marked in green the weird usernames, and i checked some of them and almost all where private messaging :S

You realise that this is only a fraction of the weird usernames listed there

WormGod · 14 Aug 2008, 20:57

quoted:

Originally Posted by *Splinter*

?

There's been a time in the past where over 500 members were online at once.

This is mediocre in comparison.

Paul.Power · 14 Aug 2008, 21:15

quoted:

Originally Posted by WormGod

There's been a time in the past where over 500 members were online at once.

This is mediocre in comparison.

I think you've missed the point, which was "look at all these really crazy usernames that were probably picked by spambots"

WormGod · 14 Aug 2008, 21:30

Ah.

Then poininja's mal-highlighting of weird names was all the more insufficient.

super_frea · 14 Aug 2008, 22:40

I found this interesting however.

They were all sending PMs at the same time. DUPOLATE ACCONT INVASDIONS!

super_frea · 14 Aug 2008, 22:44

Infact it's happening right now even more so. Look at who's online.

Paul.Power · 14 Aug 2008, 22:53

This is one trippy avatar (possible epilepsy warning?): http://forum.team17.com/member.php?u=63527

Alien King · 14 Aug 2008, 22:59

Heh, it's been going on for a little while now.
I saw a bunch of weird names the other day I recall. Didn't mention it however.

Shockdude · 14 Aug 2008, 23:23

lol look at 123321's additional information
http://forum.team17.com/member.php?u=82047

Diablo vt · 14 Aug 2008, 23:51

Ok so who else has been recieving PM's? The other day I could've sworn someone had found out my password, as I couldn't log in.

Has anyone else experienced this? It could've been a glitch somewhere but, I just want to make sure.

KRD · 15 Aug 2008, 01:21

quoted:

<KRD> Noooooooooooooooooooooooooooooooooooooooooo.
<KRD> My 42nd PM on the Team17 Forum is spam. |:<
<KRD> Even worse because I've never ever had any spam there before.

This is from IRC.

bonz · 15 Aug 2008, 01:48

Looking at all those users currently online and spamming PMs, you can see that only obscure user names starting with numbers, As, Bs and Cs are on that list; nothing further down the alphabet.

Me thinks that those accounts only had very week passwords such as 1234, made by people that just wanted to register quickly and read the otherwise inaccessible threads.
Another hint backing this theory up is that most of those accounts have only very few or no post at all and many of them were created a few years back.

Plainplane · 15 Aug 2008, 03:26

I am certain that this has something to do with this. Look at my post.

Here is the link.

Now all of a sudden those spam users disappeared, yay.

SomePerson · 15 Aug 2008, 04:00

I think it's highly unlikely that they have anything to do with each other. One is a pathetic phishing scam, the other was an indescriminate mass pm spam. Both kinds of things happen all the time and I wouldn't go jumping to the conclusion that it's the same person.

Plainplane · 15 Aug 2008, 04:01

Yes, but they were both the same link.

SomePerson · 15 Aug 2008, 04:17

Oh, then I guess I may have been wrong.

I got the same spam as you did about the new youtube, but I deleted it immediately. I now wish I still had it so I could see if I got the same link too.

Shadowmoon · 15 Aug 2008, 09:29

This explains a lot. I saw some suspicious things going on yesterday.

EDIT: There's loads of people with usernames starting with C and they are all viewing the board index.

KRD · 15 Aug 2008, 15:12

So what you guys are basically saying is that Shirdel is personally responsible for a few hundred forum accounts with weak passwords being brute forced? My feeble mind can't quite see the connection, or see how the two could possibly be related, but that's absolutely awesome.

On a more serious note, read Bonz's post again... No. Read it. Even I knew bugmenot's password.

thomasp · 15 Aug 2008, 16:10

Going to close this thread now - such attacks shouldn't be able to happen again easily.

All discussion here now: http://forum.team17.com/showthread.php?t=36976

Register	Game FAQs	Forum FAQs	Members List	Search	Today's Posts
Mark Forums Read

14 Aug 2008, 19:39	#1
poninja Join Date: May 2007 Location: 6353 Juan Tabo	lol wut? i just got in and say this weird thing :S i marked in green the weird usernames, and i checked some of them and almost all where private messaging :S __________________ Insert signature here

14 Aug 2008, 20:41	#5
farazparsa Join Date: July 2004 Location: Location, location.	If you look pretty deep, you can find the thread I made on Jan 28 '05 about us beating the record. It was awesome, we beat it twice! __________________ www.farazparsa.com

14 Aug 2008, 21:30	#9
WormGod Join Date: August 2004 Location: Noitacol	Ah. Then poininja's mal-highlighting of weird names was all the more insufficient. __________________ Achievement Unlocked: Banned Achievement Unlocked: Mentally Buoyant Achievement Unlocked: It's WormGod Season What a funny story Mark.

14 Aug 2008, 22:40	#10
super_frea Join Date: March 2004 Location: Behind you	I found this interesting however. They were all sending PMs at the same time. DUPOLATE ACCONT INVASDIONS! __________________ Link to my Deviantart Link to my Sigworm Avatar courtesy of Slick. YOU'RE MY BOY BLUE!

14 Aug 2008, 19:55	#4
iCarbonX Join Date: June 2008 Location: North-East England	I wonder if the people that have hacked Dream17 have done something here

14 Aug 2008, 22:44	#11
super_frea Join Date: March 2004 Location: Behind you	Infact it's happening right now even more so. Look at who's online. __________________ Link to my Deviantart Link to my Sigworm Avatar courtesy of Slick. YOU'RE MY BOY BLUE!

14 Aug 2008, 22:53	#12
Paul.Power Join Date: October 2001 Location: Back to the Topic Part 2	This is one trippy avatar (possible epilepsy warning?): http://forum.team17.com/member.php?u=63527 __________________ Let's Play Advance Wars \| Let's Play Advance Wars 2 Avatar courtesy of Back to the Future, with one word changed twice. GO ON THE ENGLAND cricket and rugby teams.

14 Aug 2008, 22:59	#13
Alien King Join Date: January 2004 Location: Cornwall / Warwick Uni	Heh, it's been going on for a little while now. I saw a bunch of weird names the other day I recall. Didn't mention it however. __________________ http://alien-king.deviantart.com/ Joined - 26th January 2004 Sigworm: http://forum.team17.com/showpost.php...&postcount=170 I'm trustworthy. Honest.

14 Aug 2008, 23:23	#14
Shockdude Join Date: August 2005 Location: in a game & watch system	lol look at 123321's additional information http://forum.team17.com/member.php?u=82047 __________________ also known as mr. game & worm has posed as: a plain black worm a space scientist a sock

14 Aug 2008, 23:51	#15
Diablo vt Join Date: February 2005 Location: Hell	Ok so who else has been recieving PM's? The other day I could've sworn someone had found out my password, as I couldn't log in. Has anyone else experienced this? It could've been a glitch somewhere but, I just want to make sure. __________________ One boring sig.

15 Aug 2008, 01:48	#17
bonz Join Date: December 2003 Location: Graz, Austria	Looking at all those users currently online and spamming PMs, you can see that only obscure user names starting with numbers, As, Bs and Cs are on that list; nothing further down the alphabet. Me thinks that those accounts only had very week passwords such as 1234, made by people that just wanted to register quickly and read the otherwise inaccessible threads. Another hint backing this theory up is that most of those accounts have only very few or no post at all and many of them were created a few years back.

15 Aug 2008, 03:26	#18
Plainplane Join Date: February 2006 Location: I exist somewhere?	I am certain that this has something to do with this. Look at my post. Here is the link. Now all of a sudden those spam users disappeared, yay. __________________ The only thing I play that goes by the definition "computer game" is NOW Worms Armageddon.

15 Aug 2008, 04:00	#19
SomePerson Join Date: August 2002 Location: Los Angeles	I think it's highly unlikely that they have anything to do with each other. One is a pathetic phishing scam, the other was an indescriminate mass pm spam. Both kinds of things happen all the time and I wouldn't go jumping to the conclusion that it's the same person. __________________ Kommunisticheckaya tuna vlyublyennosti kotov! Bring back K^2!

15 Aug 2008, 04:01	#20
Plainplane Join Date: February 2006 Location: I exist somewhere?	Yes, but they were both the same link. __________________ The only thing I play that goes by the definition "computer game" is NOW Worms Armageddon.

15 Aug 2008, 04:17	#21
SomePerson Join Date: August 2002 Location: Los Angeles	Oh, then I guess I may have been wrong. I got the same spam as you did about the new youtube, but I deleted it immediately. I now wish I still had it so I could see if I got the same link too. __________________ Kommunisticheckaya tuna vlyublyennosti kotov! Bring back K^2!

15 Aug 2008, 09:29	#22
Shadowmoon Join Date: November 2007 Location: North England	This explains a lot. I saw some suspicious things going on yesterday. EDIT: There's loads of people with usernames starting with C and they are all viewing the board index. __________________ Xbox Live Gamertag: Kreppz Last edited by Shadowmoon; 15 Aug 2008 at 09:41.

15 Aug 2008, 15:12	#23
KRD Join Date: August 2003 Location: #worms\|irc.gamesurge.net	So what you guys are basically saying is that Shirdel is personally responsible for a few hundred forum accounts with weak passwords being brute forced? My feeble mind can't quite see the connection, or see how the two could possibly be related, but that's absolutely awesome. On a more serious note, read Bonz's post again... No. Read it. Even I knew bugmenot's password. __________________ φ \| The Book of the New Sun \| The Perry Bible Fellowship \| Teeworlds \| Syriana \| Portishead

15 Aug 2008, 16:10	#24
thomasp User Mod Join Date: August 2001 Location: The United Kingdom	Going to close this thread now - such attacks shouldn't be able to happen again easily. All discussion here now: http://forum.team17.com/showthread.php?t=36976 __________________ The views and comments expressed by me do not represent those of Team17 - mainly because I don't work for Team17 nor do I have any contact with them - I just help moderate their forum. -- Official Mac Campaigner Now with Intel Inside! -- Quotes from Douglas Adams: "I wrote an ad for Apple: 'Macintosh - We might not get everything right, but at least we knew the century was going to end.'" "The Macintosh may only have 10% of the market, but it's clearly the top 10%."

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode