We rounded up the staff, including SRB2 & SRB2Kart developers, to assess their security, change their passwords, and enable 2-factor authentication. The staff member whose account was compromised has voluntarily stepped down and will no longer be an administrator. If your account was deleted in the attack, you can expect it to be back, complete with all of your posts and other data (as of the 14th). To fix this, the forum has been rolled back to the state it was in on April 14th, so expect some posts and addons to be missing. The Master Server partially relies on the Message Board in order to run, which is why it became unavailable.
The Message Board was then taken back down.
#Toontown infinite retro admin account software
They set the forum software to begin deleting all user accounts. However, we did not notice the email on their account had been changed, so the attackers were able to break back into the account and continue using it. We took down the forums briefly to assess damage and reset the password of the affected administrator. The attackers proceeded to spam the forums, edit posts with offensive text, and change emails and passwords of some other staff members. These permissions included the ability to see email addresses of members, but not their passwords nor the hashes thereof.
The password of one of our administrators was brute-forced, giving the attackers access to administrative permissions. In the interest of transparency, I’m going to explain why they were down.Īs Easter came to a close, we suffered a security breach. Many of you have noticed that the Message Board and Master Server have not been available for the last few days.
0 kommentar(er)
