Duke4.net Security Breach

On Saturday, 12:38 PM, my forum account was hijacked by a Brazilian/Uruguayan hacker with the IP address of 189.13.40.92, which resolves to 18913040092.user.veloxzone.com.br. More information on the hacker is available here.



A Russian hacker had also uploaded a malicious PHP script into our public forum uploads folder on 9/23/06. This may explain how many spambots were able to access our website while skipping the automated validation process.



I took the message board down earlier this afternoon and updated the forum software to the latest version available. I also ran a deep virus scan on the board files and removed the malicious scripts.



If you have any information about these hackers or think you can help us in any way to prevent such incidents from occurring in the future, please reply to this topic accordingly.