DARKJEDI you have been hacked..
 

Im almost positive this is the guy who stole your domain.

http://www.elitesecurity.org/tema/91963 * look for name hacked
http://www.elitesecurity.org/korisnik/profil/hacked *profile

As directnic reported in an earlier thread , your directnic account was hacked ( most likely with a keylogger considering the culprit ) not hijacked as originally assumed.

Anyone wanna help drop some info in this thread

l3333t h@x3rd by t3am Gu1do

i think we found the bastard :helpme

Guys from DirectNic say someone logged in to my account with the correct Login / Password.

I dont keep it anywhere on my PC. Everything is in my head.
Don't know how they got it.

:(

Thats strange, cause I regulary scan my pc for spyware.
Damn, interweb is a scary place.

my l33y keylogger just reprted that you typed this


Thats strange, cause I regulary scan my pc for spyware.
Damn, interweb is a scary place.

:1orglaugh :1orglaugh :1orglaugh

The group who hacked you is known as the "kosovo hackers group"

haha............

it might be a piece of software on your website like phpbb.

Or you signed up for a program/site using the same username/password for your directnic account

r34llY 3v1l

I have a giant list of domains they also own ( all pharmacy related )

thats what I was thinking. I always use a different username password.

I figure your too smart to fall for any fake e-mails or files that may have found your way into your inbox. They probaly harvest e-mails from WHOIS infos.

How do you know it was a Kosovo hacking group ?

I need all info i can get to prove to Enom that my domain was stolen.

again .. use domain registrars known for harboring mailing domains and the likes. they aren't hacking you, they're using nifty exploits against sites. troll around #darknet on EFNET irc, im sure just idling you'll pick up some clues as to how they are hijacking domains.

he has been posting on the same ip block since the date directnic logged the initial entry to your account.

even up to yesterday he has been using that i.p.

Now there could be several people using that ip block obviously , but the info seems way to close.

He spams several pharmacy domains, all the whois are different , but they usually are atyahoo.com the same as what he changed yours too

I realise you think you know what your talking about , but you dont.

His account was entered using his own password and username , the conact info was changed, then domain trasferred then contact info changed back so it looked like a hijack not a simple theft.

jedi... which of your domains has been stolen? Didn't know about that...

unfortunately serverside exploits exist and are used often. i'm not saying they didn't login with his info, I accept that fully. but you got me lol.

kosovo hackers group 4 Life

KHG4L

http://www.stateforesters.org/images/smokey1.gif

Is Our New Member

KHG4L!!!!!!!!!!!!!!

I am sure a public apology will be forthcoming on all the boards about DirectNIC, our security, and of course our amazing customer support (by an owner of all people).

:thumbsup

Kosovo is part of the old Yugoslavia right when it got split up?

i think its part of Serbia .. i think we liberated them or something.

Thats my high school yearbook picture you bastard !!!

use my driver license photo please..

http://www.dnr.wa.gov/htdocs/rp/prevention/smokey2.gif

:1orglaugh :1orglaugh

SmokeyTheBear you are the shit!I hope I don't get on your badside. If anything like that happens to my site's I would want you to look into it. I'm in awe of you.


:thumbsup

The real kudos goes to directnic for checking every detail..

Im just doing sunday homework before the game :) :thumbsup

This is the kind of stuff that makes the internet so fun :) It doesn't really require brains , just tenacity !!

Eagles or patriots?

Who do you like?

Eagles +7

?

:1orglaugh

Email verification is bullshit, i think registers should require that you fax your id along with your credit and verify with you at your home phone number before they ever allow any transfer.

Holy shit, that is fucking funny. :1orglaugh :1orglaugh :1orglaugh



Sorry for what happened DJ.

This thread needs some pussy

The reason why they dont do this , is because some registrars were simply ignoring requests to transfer domains fromthe owners..

They should have a seperate password for domain transfers that icaan should send you when you purchase a domain , then when you want to change registrars you simply tell your new registrar and icann sends you an email asking for the original domain transfer password.

This way your registrar has no way of knowing the password for transfers , only the real owner would know.

Fucked up shit...I'm paranoid in doing my online banking cause of this spyware shit

nice work SmokeyTheBear :thumbsup

:1orglaugh

Well, if you ever logged into your a/c from teh directnic main homepage (even just once) and never used their secure server EVERY SINGLE TIME, then a simple traffic sniffer locked on to directnic's website would have picked it up.
DirectNIC is hosted with datasync.com which is on a Sprint network. Given the vast size of Sprint, any capable hacker worth his cheese could latch on to DirectNICs primary router and sniff out your (and every one else's) password.

NEVER EVER EVER log in without SSL.
If you are 200% positive that you have NEVER logged in w/o SSL and that you are absolutely sure there is no keylogger spyware on your puter, then take it to DirectNIC - they may be liable (if you can prove the spyware stuff - they can prove the SSL logins)

does anyone know of a keylogger dector program out there to check your pc's?

Kick his ass if its him

:1orglaugh :1orglaugh

Do what i do and buy a seperate computer just for sensitive data. I picked up a pc with redhat installed for about $200 and hooked up my old monitor to it. Whenever i buy something, or log into my sensitive accounts i don't have to worry about keyloggers or spyware jacking my stuff

I woulda used that sucker 100% of the time.
Problem solved.

Ultimate security! Protect your PC from viruses and keyloggers!
1. Send $75 by PayPal to [email protected]
2. Disconnect your computer from the internet.
3. Fill all drives with bubble gum.
4. Unplug computer.

Your computer is now 100% safe.

Can some one tell me what language that forum is?

Whadda ya expect? All those Russians pulling shit on the net. Don´t you just hate them? :Graucho

Blame your Internet provider or... VPN service in case if you're using some VPN or socks.