heather
Junior Member
![[Avatar]](http://i396.photobucket.com/albums/pp50/scottishheather_10/family5017.jpg)
Posts: 41
Status: Offline
Joined:
pm | URGENT HELP PLEASE (12th Nov 08 at 11:14am UTC)
hackers | | Forum URL:
Experienced By:
Browser:
Operating System:
Problem:
Hi there I have circle of friends on here and, one of my admins account has been hacked into over night and the said person has sent messages to my members causing trouble, she would of gained acces to my admins personal messages etc and I need to know how she did this and how to ban them etc. please help!!! Heather xx | |
|
Ross
Administrator
![[Avatar]](http://uploads.virtualforums.co.uk/forums/pokemon/vforums-qr1.png)
Posts: 3,709
Status: Offline
Gender: Male
Age: 9 1⁄4
Joined:
Additional Groups:
Support Team
pmwwwgtalkvForum | | Re: URGENT HELP PLEASE (12th Nov 08 at 11:24am UTC) | | Hi Heather,
Do you still have access to your account on there then?
Do these PMs still exist? If not can you tell me some things what their subject and/or content was. Even if they've been deleted I'll be able to lookup the IP address of who sent them. | |
|
|
heather
Junior Member
Posts: 41
Status: Offline
Joined:
pm | | Re: URGENT HELP PLEASE (12th Nov 08 at 11:45am UTC) | | The said person was called Sophi and her user name was shinycandi, she went into hels account somehow and PM'd all members with an email from another forum that her and I were in conflict over, she is a nasty piece of work, but I cant understand how she got access to Hels account Also Celine (username cm1e) has been deleted and I have blocked there IP addresses, but I need to know what kind of damage can the pair of the do as obviously they now have personal info of us!!! Surely this is a police matter now? | |
|
Ross
Administrator
Posts: 3,709
Status: Offline
Gender: Male
Age: 9 1⁄4
Joined:
Additional Groups:
Support Team
pmwwwgtalkvForum | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:17pm UTC) | | The said person was called Sophi and her user name was shinycandi, she went into hels account somehow and PM'd all members with an email from another forum that her and I were in conflict over, she is a nasty piece of work, but I cant understand how she got access to Hels account Also Celine (username cm1e) has been deleted and I have blocked there IP addresses, but I need to know what kind of damage can the pair of the do as obviously they now have personal info of us!!! Surely this is a police matter now?
So does hels still have access to her account? I've been looking at numerous IP numbers which isn't helped by the fact that hels seems to have a dynamic IP address (it changes every time she connects to the Internet).
Looking at the private messages sent from hels account, none seem to match the description of being trouble making. Do we have any other details such as the subject of the message or who it was sent to?
I've also looked up the IP addresses associated with both cm1e and shinycandy (note, the last IP shinycandy logged in with was (pm me if you didn't copy it already) - different to the one you have banned). Neither of their IPs are associated with any PMs sent from hels account.
As for the final question regarding how. There are only two ways that someone can get access to someone elses account.
1, Guess the password (known as cracking)
2, Use the same computer. Particularly if a public computer is used and you don't log out then someone can come along behind you and have full access to your account. | |
|
|
Sven
Full Member
Posts: 215
Status: Offline
Joined:
pm | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:20pm UTC) | | Psst, Ross, a tip. Censor the IP address  Kindda rude posting it for the whole world to see. Just a point I'm going to point out as it IS in your privacy policy.
(I really don't care, but others will. Just some heads up) | |
|
|
heather
Junior Member
Posts: 41
Status: Offline
Joined:
pm | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:21pm UTC) | | | Even if you don't percieve these messages as causing trouble WE do hun and the fct the this person has been able to hack into Hels account and read her private info and then send a PM to most members making it look as if it were hels is just awful. And the subject is me, it is me she is attacking and I need to know how to prevent this!!! And can everyone have a dynamic IP address. And how do we stop this happening in the future Ross> | |
|
Ross
Administrator
Posts: 3,709
Status: Offline
Gender: Male
Age: 9 1⁄4
Joined:
Additional Groups:
Support Team
pmwwwgtalkvForum | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:27pm UTC) | | Even if you don't percieve these messages as causing trouble WE do hun and the fct the this person has been able to hack into Hels account and read her private info and then send a PM to most members making it look as if it were hels is just awful. And the subject is me, it is me she is attacking and I need to know how to prevent this!!! And can everyone have a dynamic IP address. And how do we stop this happening in the future Ross>
What I'm saying is that I'm having trouble telling which messages are the troublesome ones, sent by someone other than hels. She has sent a lot of messages and I'm trying to tell which one(s) you are referring to. By subject, I mean the title of the message. Or even the link to it if it still exists? | |
|
|
Ross
Administrator
Posts: 3,709
Status: Offline
Gender: Male
Age: 9 1⁄4
Joined:
Additional Groups:
Support Team
pmwwwgtalkvForum | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:28pm UTC) | | Psst, Ross, a tip. Censor the IP address Kindda rude posting it for the whole world to see. Just a point I'm going to point out as it IS in your privacy policy. (I really don't care, but others will. Just some heads up)
I intended to censor it the whole time, just once Heather had seen it | |
|
|
heather
Junior Member
Posts: 41
Status: Offline
Joined:
pm | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:28pm UTC) | | | I have had to ban Celine who was an admin today, would sophi of been able to access celines password and somehow gain access to hels account that way? | |
|
heather
Junior Member
Posts: 41
Status: Offline
Joined:
pm | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:32pm UTC) | | | subtitle for the message was "oh good god" | |
|
Ross
Administrator
Posts: 3,709
Status: Offline
Gender: Male
Age: 9 1⁄4
Joined:
Additional Groups:
Support Team
pmwwwgtalkvForum | | Re: URGENT HELP PLEASE (12th Nov 08 at 12:41pm UTC) | | | OK, I've found the message, would you like it removed from being able to be seen by anyone other than you and hels? The IP it was posted by has been used many times in the past by the user with the username "loz". However it is an AOL IP address so there has to be a level of uncertainty, AOL often uses dynamic IPs which means that it could be a coincidence that the same IP has been used by both loz and the "cracker". | |
|
|
heather
Junior Member
Posts: 41
Status: Offline
Joined:
pm | | Re: URGENT HELP PLEASE (12th Nov 08 at 1:02pm UTC) | | | i am confused as Loz deleted herself weeks and weeks ago. | |
|
Ross
Administrator
Posts: 3,709
Status: Offline
Gender: Male
Age: 9 1⁄4
Joined:
Additional Groups:
Support Team
pmwwwgtalkvForum | | Re: URGENT HELP PLEASE (12th Nov 08 at 1:11pm UTC) | | i am confused as Loz deleted herself weeks and weeks ago.
Like I say, it could just be a weird coincidence. But there are 14 records in the security log of actions performed by loz from that IP address. Other than that and these 3 PMs, the IP address does not appear in any other records. | |
|
|
Ross
Administrator
Posts: 3,709
Status: Offline
Gender: Male
Age: 9 1⁄4
Joined:
Additional Groups:
Support Team
pmwwwgtalkvForum | | Re: URGENT HELP PLEASE (12th Nov 08 at 1:27pm UTC) | | | I've been widening the search across the entire vForums network. You mentioned a conflict over another forum, was this one on the vForums network (if so can you PM me the URL). I ask as the IP seems to have been used for regular access to 2 other forums. | |
|
|
heather
Junior Member
Posts: 41
Status: Offline
Joined:
pm | | Re: URGENT HELP PLEASE (12th Nov 08 at 1:33pm UTC) | | sorry when I say another forum I mean website and it is www.babycentre.co.uk ( ihave reported her to the community manager on there)
When were the latest activity from Loz's IP address on my forum? And can you tell me when this mail was sent from Hels account? Can we tell who else was online at that time? Also I have spoken to Hels and there is no way anyone would know her password etc so that leaves us to how this has happened!!!
When a member deletes herself why dont the admins or at least me get notification etc | |
|
