If you run a PHPBB forum, be on the watch for a user called "avanluxxia" or "avanluxia"
known emails so far :
[email protected]
[email protected]
[email protected]
---------------------------------------
Name Server: NS1.USINGMAC.ORG
ICANN Registrar: GO DADDY SOFTWARE, INC.
Created: 2005-03-28
Expires: 2006-03-28
Status: ACTIVE
Please note: the registrant of the domain name is specified
in the "registrant" field. In most cases, Go Daddy Software, Inc.
is not the registrant of domain names listed in this database.
Registrant:
Chardy Wang
15 Upper Boon Keng Rd
#12-10-1063
Singapore 380015
Singapore
Registered through: GoDaddy.com
Domain Name:
ALIENFAKE.COM
Created on: 28-Mar-05
Expires on: 28-Mar-06
Last Updated on: 29-Mar-05
Administrative Contact:
Wang, Chardy
[email protected]
15 Upper Boon Keng Rd
#12-10-1063
Singapore 380015
Singapore
6598320135 Fax --
Technical Contact:
Wang, Chardy
[email protected]
15 Upper Boon Keng Rd
#12-10-1063
Singapore 380015
Singapore
6598320135 Fax --
Domain servers in listed order:
NS1.USINGMAC.ORG
NS2.USINGMAC.ORG
Domain name:
FLASHCUBICLE.COM
Administrative Contact:
Wang, Chardy
[email protected]
Nanyang Crescent
#12-1063
nanyang
Singapore, SG 580015
SG
+65.98320135
Technical Contact:
Wang, Chardy
[email protected]
Nanyang Crescent
#12-1063
Nanyang
Singapore, SG 580015
SG
+65.98320135
Registrar of Record: TUCOWS, INC.
Record last updated on 07-Dec-2004.
Record expires on 27-Nov-2005.
Record created on 27-Nov-2004.
Domain servers in listed order:
NS1.USINGMAC.ORG
NS2.USINGMAC.ORG
-----------------------------------------------------
If you go to ALIENFAKE.COM you will see mister Wang has been playing with some kind of a hacking script that targets PHPBB boards. He signed up several times for my board today, but luckily I have been revamping and improving my board, and happened to catch him!
Alienfake.com was registered 3 days ago, so it was not an existing board that got hacked, but rather a TESTING GROUND for whatever malicious scripts MR CHURDY WANG has been developing.
I have disabled user activations now, so anybody attempting to join my forum will have to be approved by me first. I am sorry for this inconvenience, but it is a neccesary action. I have also banned all webmail accounts, and blacklisted his IP.
If you run a PHPBB , take a second to secure it the best you can from this guy!
