JoomDonation Hacked Email

Not sure if anyone on your end has seen this, but I just received this email:

How the hell are you? No need to ask, I’m fine!

I’m the one who has hacked all of your sites, emails, accounts etc. that has been using JoomDonation.com site/components. Scaring? Hell Yea

About 15 months ago, I was able to penetrate into several Joomla sites. One of these luckies was JoomDonation.com After a while I realised that their crappy components were used by other Joomla developers too so I injected my shells into JoomDonation.com components. As per result, I’ve a list of 300000+ Joomla users+emails and you’re just one of them, lucky thing

Don’t you believe? Follow me on twitter.com/joomleaks or #joomleaks hashtag and you’ll see the database of JoomDonation.com as a beginning.

Yea Yea I know you all have scanners, firewalls, admin tools etc installed on your server/site but you what? F*ck em all. They’re just noob tools. Think about, I’ve injected my own shells into 10000+ Joomla sites and none of you or your magic tools have been awared of.

WARNING: You have 5 days to clean up your sites then my bot will start putting your sites down. If your site was not so valuable for me, removing the components would be enough. If so, then I will most probably blackmail you soon

Want an advice from a hacker? Don’t use any script from Thailand/Vietnam developers, their code is so crappy Try Indian quality.

This email was sent to all JoomDonation.com users. We’ll meet again if you have accounts registered to other Joomla developers

This was my thanksgiving gift, keep yourself safe

JnLiau

Likely not an actual threat, but I thought I would share it on your board just in case!

Thanks!!

I also received, and have submitted a ticket. I expect a high level of response from OS Solution on this.

I think it should be taken very seriously.

O receive this email to. and i´m on pastebin list pastebin.com/RKwUfwYA

I have also received this, and raised a support ticket with joomdonation. worrying that the email had my full name in it,and also my email is on the pastebin list on twitter- JD needs to sort this out quickly, to maintain confidence of users.

The fact that my full name was in there freaked me out as well.

Sorry all. The hacker somehow has access to our hosting account, has access to our site database and send this email with. He somehow wants to destroy our business, move customers to India .

I will update more when we found something. So sorry for that.

I can say that our extensions are very well written. It is somehow our hosting account has a security hole. I will give update when I have something more to show

Thanks for the reassurance, Tuan.

Thanks for the reply, just subscribing to the topic.

Am I correct in assuming that this hacker does not actually pose any security risk to our sites, or is it too early to say?

Subscribing to this thread, like the rest. I to got that email.