JoomDonation Hacked Email

  • Rick Stoffiere
  • Topic Author
  • Offline
  • New Member
  • New Member
More
9 years 4 months ago #53162 by Rick Stoffiere
JoomDonation Hacked Email was created by Rick Stoffiere
Not sure if anyone on your end has seen this, but I just received this email:

How the hell are you? No need to ask, I’m fine!

I’m the one who has hacked all of your sites, emails, accounts etc. that has been using JoomDonation.com site/components. Scaring? Hell Yea :-)

About 15 months ago, I was able to penetrate into several Joomla sites. One of these luckies was JoomDonation.com After a while I realised that their crappy components were used by other Joomla developers too so I injected my shells into JoomDonation.com components. As per result, I’ve a list of 300000+ Joomla users+emails and you’re just one of them, lucky thing :-)

Don’t you believe? Follow me on twitter.com/joomleaks or #joomleaks hashtag and you’ll see the database of JoomDonation.com as a beginning.

Yea Yea I know you all have scanners, firewalls, admin tools etc installed on your server/site but you what? F*ck em all. They’re just noob tools. Think about, I’ve injected my own shells into 10000+ Joomla sites and none of you or your magic tools have been awared of.

WARNING: You have 5 days to clean up your sites then my bot will start putting your sites down. If your site was not so valuable for me, removing the components would be enough. If so, then I will most probably blackmail you soon :-)

Want an advice from a hacker? Don’t use any script from Thailand/Vietnam developers, their code is so crappy :-) Try Indian quality.

This email was sent to all JoomDonation.com users. We’ll meet again if you have accounts registered to other Joomla developers :-)

This was my thanksgiving gift, keep yourself safe ;-)

JnLiau


Likely not an actual threat, but I thought I would share it on your board just in case!

Thanks!!
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

More
9 years 4 months ago - 9 years 4 months ago #53163 by socoweb
Replied by socoweb on topic JoomDonation Hacked Email
I also received, and have submitted a ticket. I expect a high level of response from OS Solution on this.

I think it should be taken very seriously.
Last edit: 9 years 4 months ago by socoweb. Reason: urgency!
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

  • Diego Fabián Hagopian
  • Offline
  • New Member
  • New Member
More
9 years 4 months ago #53164 by Diego Fabián Hagopian
Replied by Diego Fabián Hagopian on topic JoomDonation Hacked Email
O receive this email to. and i´m on pastebin list pastebin.com/RKwUfwYA
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

More
9 years 4 months ago #53172 by Tom Breen
Replied by Tom Breen on topic JoomDonation Hacked Email
I have also received this, and raised a support ticket with joomdonation. worrying that the email had my full name in it,and also my email is on the pastebin list on twitter- JD needs to sort this out quickly, to maintain confidence of users.
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

  • Rick Stoffiere
  • Topic Author
  • Offline
  • New Member
  • New Member
More
9 years 4 months ago #53173 by Rick Stoffiere
Replied by Rick Stoffiere on topic JoomDonation Hacked Email
The fact that my full name was in there freaked me out as well.
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

  • Tuan Pham Ngoc
  • Away
  • Administrator
  • Administrator
More
9 years 4 months ago #53174 by Tuan Pham Ngoc
Replied by Tuan Pham Ngoc on topic JoomDonation Hacked Email
Sorry all. The hacker somehow has access to our hosting account, has access to our site database and send this email with. He somehow wants to destroy our business, move customers to India .

I will update more when we found something. So sorry for that.

I can say that our extensions are very well written. It is somehow our hosting account has a security hole. I will give update when I have something more to show
The following user(s) said Thank You: DaffRider, arkofhope

Please Log in or Create an account to join the conversation.

  • Rick Stoffiere
  • Topic Author
  • Offline
  • New Member
  • New Member
More
9 years 4 months ago #53178 by Rick Stoffiere
Replied by Rick Stoffiere on topic JoomDonation Hacked Email
Thanks for the reassurance, Tuan.
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

More
9 years 4 months ago #53187 by Richard
Replied by Richard on topic JoomDonation Hacked Email
Thanks for the reply, just subscribing to the topic.

Your website shouldn't be complicated.
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

More
9 years 4 months ago #53189 by Tom Breen
Replied by Tom Breen on topic JoomDonation Hacked Email
Am I correct in assuming that this hacker does not actually pose any security risk to our sites, or is it too early to say?
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

More
9 years 4 months ago #53190 by iecus
Replied by iecus on topic JoomDonation Hacked Email
Subscribing to this thread, like the rest. I to got that email.
The following user(s) said Thank You: arkofhope

Please Log in or Create an account to join the conversation.

Moderators: Mr. DamDũng Nguyễn Việt