Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Neustar, Inc.
Protect your website & network
using real-time information & analysis

www.neustar.biz
Cybercrime
Tame your scariest paperwork. Find Out How
Average Rating:
Rate this article:  
Hackers Asking $7,000 for vBulletin.com Exploit
Hackers Asking $7,000 for vBulletin.com Exploit

By Jennifer LeClaire
November 18, 2013 2:23PM

    Bookmark and Share
The Inj3ct0r Team, the hacker group that claims to be behind the attack, posted a note on Facebook saying that it not only hacked vBulletin.com and Macrumors.com but also got to the shell, the database and the root server. The hackers wanted to prove that “nothing is this world” is safe including vBulletin.com and Macrumors.com.
 



A hacker group is claiming responsibility for exploiting a zero-day flaw in the vBulletin Internet forum software. Hackers are bragging that they broke into both the MacRumors.com and vBulletin.com forums.

VBulletin Solutions, the company that develops the online forum software, reset all account-holder passwords on Friday. The company has confirmed that customer log-in credentials were indeed stolen.

“Very recently, our security team discovered sophisticated attacks on our network, involving the illegal access of forum user information, possibly including your password,” the company said on its bulletin board. “Our investigation currently indicates that the attackers accessed customer IDs and encrypted passwords on our systems. We have taken the precaution of resetting your account password. We apologize for any inconvenience this has caused but felt that it was necessary to help protect you and your account.”

A $7,000 Exploit?!

The Inj3ct0r Team, the hacker group that claims to be behind the attack, posted a note on Facebook saying that it not only hacked vBulletin.com and Macrumors.com but also got to the shell, the database and the root server. The hackers wanted to prove that “nothing is this world” is safe.

“We found a critical vulnerability in vBulletin all versions 4.x.x and 5.õ.x. We've got upload shell in vBulletin server, download database and got root,” the hackers wrote. “Macrumors.com was based on vBulletin CMS. We use 0day exploit on vBulletin, got password moderator. 860000 hacked too. The network security is a myth.”

The Inj3ct0r Team offered to sell the vulnerability for $7,000. The post generated more than 190 likes, 49 shares, and 58 comments as of the time of this writing. One Facebooker named Kori Stroud said, “No one will pay $7000 for this or any other exploit. But good try though.”

Is It a Scam?

Brian Krebs, a former Washington Post reporter who now runs KrebsonSecurity, reports that several individuals do indeed appear to be selling what they claim are zero-day exploits in vBulletin 4.x and 5.x, including the attackers who first contacted him on Thursday claiming responsibility for the break-in.

“That person, using the nickname Inj3ct0r, advertised a copy of the supposed exploit for $7,000, available for payment via virtual currencies Bitcoin and WebMoney,” he wrote in a blog post. “According to this user’s Bitcoin wallet, at least one person appears to have paid for a copy, sending the user 15 Bitcoins on Nov. 15 (when Bitcoin’s value was approximately $435 per BTC, according to Bitcoincharts.com).”

As Krebs sees it, the person who posted on Friday may have seen an opportunity to generate or scam interested buyers by offering to sell the same exploit for just $200 in Bitcoins. Although Krebs said it’s unclear if that sale was for real or a scam, several buyers apparently thought it worthwhile and cheap enough to verify the claim with a payment.
 

Tell Us What You Think
Comment:

Name:



APC has an established a reputation for solid products that virtually pay for themselves upon installation. Who has time to spend worrying about system downtime? APC makes it easy for you to focus on business growth instead of business downtime with reliable data center systems and IT solutions. Learn more here.


 Cybercrime
1.   Russian Hacker's Charges Revealed
2.   Germany Probes New U.S. Spy Case
3.   Russian Arrested in Hacking Case
4.   Cybercrime Ring Uncovered in Brazil
5.   Astros: Hackers Got Trade Info


advertisement
Germany Probes New U.S. Spy Case
Further fraying U.S., Berlin relations.
Average Rating:
IBM Uncovers Android Security Flaw
Ten percent of devices at risk.
Average Rating:
T1red of P@sswords? UR N*t @lone
New authentication systems surfacing.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Charges: Russian Stole Data from U.S. Restaurants, Zoo
A Russian man arrested on bank fraud and other charges hacked into computers at restaurants in Washington, hundreds of other retail businesses, and even the Phoenix Zoo, authorities say.
 
Another Month, Another IE-Focused Patch Tuesday
Microsoft rolled out 59 vulnerabilities for Internet Explorer in June. But the IE-patching party is not over yet. Redmond published six new security bulletins on Tuesday; two, critical; three, important.
 
Russian Arrested in Hacking Case Filed in Seattle
The U.S. Secret Service has arrested a Russian man who is accused of hacking store computers to steal thousands of credit card numbers, charging him with bank fraud, identity theft and more.
 

Enterprise Hardware Spotlight
Another Day, Another Internet of Things Consortium Is Born
In the emerging Internet of Things, zillions of devices will be talking to each other. Samsung, Intel and Dell just formed a consortium to ensure each thing can understand what others are saying.
 
Gartner Sales Study Sees Tablets Up, PCs Down but Recovering
Are PCs on the comeback trail? That depends on how you define "comeback." While tablet sales remain strong, Gartner's latest study found PC shipments aren't dropping as fast as they did last year.
 
Review: Warming Up to Tablets with Keyboard Covers
If you've ever thought tablets with keyboard covers were just a poor excuse for a laptop, think again. Nokia's Lumia 2520 comes with an optional keyboard cover that just may change your mind.
 

Mobile Technology Spotlight
Silent Circle Ends Phone Roaming Charges
Encryption telephone service provider Silent Circle has begun offering international calling plans without global roaming charges, allowing overseas travelers to avoid exorbitant wireless fees.
 
LinkedIn Replaces Contacts App with New 'Connected'
Popular business social site LinkedIn is trying to reinvigorate its mobile side. The company has launched a redesigned app for keeping people connected, replacing its previous Contacts app.
 
Is Apple Dumping iPhones on eBay in Advance of iPhone 6?
Apple reportedly has opened an eBay storefront called Factory Certified that is selling Apple-certified refurbished iPhones for a fraction of what they cost new, with a "final quality inspection by Apple."
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | Small Business | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.