Results 1 to 4 of 4
  1. #1
    V-Louch Versuvio's Avatar
    Status
    Versuvio is offline
    Gender
    Join Date
    Apr 2008
    Posts
    86,058
    Location
    >> iBase <<
    Apple only
     



    Important information from NarutoBase

    This e-mail is sent to all members. Please follow instructions as your password has been reset.
    ========================

    Hello,

    You are receiving this message because you have an account registered on NarutoBase.net

    The NarutoBase forums software was compromised by an external attacker. As a result, the attacker has gained access to read your username, email address and an encrypted copy of your password from the forums database.

    If you have used this password and email address to authenticate at any other website, you are urged to reset the password on those accounts immediately as the attacker may be able to use the compromised personal information to access these other accounts. It is important to have a distinct password for different accounts.

    The NarutoBase.net website is currently offline and we are working to restore this as soon as possible. Please take the time to change your NarutoBase.net account password when service is restored by using the following link:
    http://narutobase.net/forums/login.php?do=lostpw&email=

    We apologize for any inconvenience to the NarutoBase community, thank you for your understanding.

    The NarutoBase.net Team
    ========================

    Some detailed information:
    - A new leak was discovered this week in vBulletin in the install basement.
    - This leak has been used by the attacker before we received this bug report by August 26 at 8:33 PM CEST
    - After the attacked gained access by this leak, a new user was created with admin permissions. With this account, the attacker installed a plugin which gave access to one of our servers. On this server, he managed to gain access to the database as well and has seen the user database with the user information, encrypted password and e-mail address. This happened on August 27.

    The passwords are encrypted and salted in our database to ensure safety. However, we still force all users to reset their passwords.

    What we do know is the leak has been found and these scripts are removed without impacting the site. vBulletin is investigating this issue.

    What we also do know is how extremely important it is to keep investigating all activity, all servers and all actions by everybody in order to ensure safety. Today we have failed to keep our name as the safest Anime community after 6 years of running without being compromised as what happened today.

    I deeply apologize for any inconvenience to the NarutoBase community, to all of you, who have visited NarutoBase now and in the past and we hope you will trust us in the future.
     
         
    Last edited by Versuvio; 08-30-2013 at 06:14 PM.

  2. #2
    V-Louch Versuvio's Avatar
    Status
    Versuvio is offline
    Gender
    Join Date
    Apr 2008
    Posts
    86,058
    Location
    >> iBase <<
    Apple only
     



    Re: Important information from NarutoBase

    Gmail users might experience some trouble with receiving a new password e-mail. If it is not in your junk folder, please request a new password again by the following link.
    http://narutobase.net/forums/login.php?do=lostpw&email=
     
         

  3. #3
    V-Louch Versuvio's Avatar
    Status
    Versuvio is offline
    Gender
    Join Date
    Apr 2008
    Posts
    86,058
    Location
    >> iBase <<
    Apple only
     



    Re: Important information from NarutoBase

    Update: We receive a massive amounts of emails and PM's related to the attack. It can now take up days before you receive a reply but we are doing our best to get back to you as soon as possible.

    Instead of PM'ing a single staff member, please post your questions in the new created section so all staff members can work together to answer your questions and/or concerns.
     
         

  4. #4
    V-Louch Versuvio's Avatar
    Status
    Versuvio is offline
    Gender
    Join Date
    Apr 2008
    Posts
    86,058
    Location
    >> iBase <<
    Apple only
     



    Re: Important information from NarutoBase

    Important update

    Update September 8:
    Database updates. Today a fix is applied and will give the users access again who lost their e-mail account or forgot the address in order to reset the password. All users who already reset their passwords are untouched in this fix. All users who didn't will get their old password back and are forced to change their password right after the login process.

    Please be advised that you always must use an up to date e-mail address in your account. Please change it to a working one after you regained access again.

    If the forums accept your password after you login but remained logged out, please remove all cookies related to the domain narutobase.net and .narutobase.net (dot) and try again.

    Thanks again for your patience.
     
         

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •