dreigmail gehackte site JoomDonation.com

Hallo,

ik kreeg vanmiddag onderstaande mail. Ik vraag me af of het een hoax is of dat het echt is??? De hackert heeft in ieder geval wel mijn mailadres en naam te pakken gekregen en eea is gelinkt aan een betaalde download die ik ooit bij JoomDonation.com heb gedaan.

Ik gebruik geen componenten (meer) van JoomDonation.com, maar dit ziet er wel serieus uit. Let dus op als je componenten van JoomDonation gebruikt. Iemand soortgelijke of ergere ervaringen?

Ik hoor het graag.

Hello <mijn naam>

How the hell are you? No need to ask, I’m fine!

I’m the one who has hacked all of your sites, emails, accounts etc. that has been using JoomDonation.com site/components. Scaring? Hell Yea

About 15 months ago, I was able to penetrate into several Joomla sites. One of these luckies was JoomDonation.com After a while I realised that their crappy components were used by other Joomla developers too so I injected my shells into JoomDonation.com components. As per result, I’ve a list of 300000+ Joomla users+emails and you’re just one of them, lucky thing

Don’t you believe? Follow me on twitter.com/joomleaks or #joomleaks hashtag and you’ll see the database of JoomDonation.com as a beginning.

Yea Yea I know you all have scanners, firewalls, admin tools etc installed on your server/site but you what? F*ck em all. They’re just noob tools. Think about, I’ve injected my own shells into 10000+ Joomla sites and none of you or your magic tools have been awared of.

WARNING: You have 5 days to clean up your sites then my bot will start putting your sites down. If your site was not so valuable for me, removing the components would be enough. If so, then I will most probably blackmail you soon

Want an advice from a hacker? Don’t use any script from Thailand/Vietnam developers, their code is so crappy Try Indian quality.

This email was sent to all JoomDonation.com users. We’ll meet again if you have accounts registered to other Joomla developers

This was my thanksgiving gift, keep yourself safe

JnLiau

Hallo,

stuur via pm eens de urls of url van je site(s) waar het omgaat.

Groeten Ron

Hier staat meer hierover: forum.joomla.org/viewtopic.php?f=714&p=3243879
En hier meer: www.akeebabackup.com/home/news/1608-anno...aks-allegations.html

Zie ook: joomdonation.com/forum/questions/45068-i...-security-issue.html

Een goede blog post over beveiliging www.magneticweb.be/blog/entry/bescherming-van-website .