Jump to content

- - - - -

Dec 13Th Incident - Official Response


328 replies to this topic

#241 warp103

    Member

  • PipPipPipPipPipPip
  • Bad Company
  • 342 posts
  • Facebook: Link
  • Locationdaytona Beach fl

Posted 15 December 2012 - 10:43 AM

View PostThontor, on 15 December 2012 - 08:14 AM, said:

and your cache?


not a ache issue google is checking and still reporting it. so it server side not local.

#242 Wolfways

    Member

  • PipPipPipPipPipPipPipPipPipPip
  • Mercenary
  • 6,499 posts
  • LocationIn a shutdown overheated mech near you.

Posted 15 December 2012 - 10:51 AM

View PostJudgeDeathCZ, on 15 December 2012 - 08:13 AM, said:

bumping this -.-
deleted cookies and cache 2 times

Same here.

#243 Paul BlackJack Cady

    Member

  • PipPipPipPipPipPip
  • 467 posts
  • Google+: Link
  • LocationLyran Sector, Planet: Canal, Primary Base HQ

Posted 15 December 2012 - 11:50 AM

I'm still getting this...

Posted Image

followed by this...

Posted Image

I have followed a lot of the blue links and found a very strange trail........

so after resetting my password, clearing my cache and cookies now I'm getting this most of the time!

Posted Image

#244 Dr B00t

    Member

  • PipPipPipPipPipPip
  • Survivor
  • 496 posts

Posted 15 December 2012 - 05:32 PM

appreciate the transparency
ty

#245 Livewyr

    Member

  • PipPipPipPipPipPipPipPipPipPip
  • Legendary Founder
  • Legendary Founder
  • 6,733 posts
  • LocationWisconsin, USA

Posted 15 December 2012 - 05:34 PM

Just got it again..

(getting weary, as I just lost my laptop for 2 weeks from a virus destroying my hard drive...if I get it too much more I'm going to quit coming here for a while.)

#246 AirVengeance

    Member

  • Pip
  • Shredder
  • Shredder
  • 15 posts

Posted 15 December 2012 - 09:21 PM

I got the email too.

Kinda sucks they are saying email wasn't comprimised when OBVIOUSLY, OBVIOUSLY!!!! has been comprimised.

#247 Paul BlackJack Cady

    Member

  • PipPipPipPipPipPip
  • 467 posts
  • Google+: Link
  • LocationLyran Sector, Planet: Canal, Primary Base HQ

Posted 15 December 2012 - 11:48 PM

I am completely surprised, ashamed and put off at the IGNORANCE that some of you members are showing!!! How dare you have the marbles to tell us that we are NOT receiving this warning just because you have stopped receiving them, floors me!
I read on another thread where a member actually calls another member a liar because he cropped his image of the warning, which in turn did not show the time or date... how in the world, why in the world would that even matter! THE MAN RECEIVED THE WARNING JUST AS I DID AND I'M STILL RECEIVING IT!
The moderators have made a statement’s that the virus has been found and has been removed; WE do not/will not know if that is true! We just have to believe them; we just have to have faith!
Moderator Prosperity Park posted: Some people are still receiving warnings, some aren't, but Google says that no Infectious Behavior was observed as a result of the pages on this web site since December 13th. StopBadware takes time to get sites reviewed and green-lit after being blacklisted in the first place. Meaning that we will just have to wait this out, I on the other hand am going to post images of the warnings (with the date’s) just so you know and can’t call me a liar.
Everything from Norton, Firefox, MacAfee, Chrome and all the others have been reporting it, Just because you have not received the warning does not give you the right to call us liars, especially when there has been a clear and present attack against Mechwarrior Online and add to that fact the there has been an official release from Bryan Ekman the Creative Director at http://mwomercs.com/...icial-response/
What is bothering me even more than the ignorant member’s is with what amazing speed the moderators are locking topics, threads and post. They have been deleting left and right. My main question is why? It is almost like they want to keep it quiet or at the very least keep it confined… but why??
Blackhole topic: locked, Firefox topic: locked, Norton topic: locked on and on and on. I have seen more locked topics, threads and post about this then anything anywhere in the entire forum, except maybe, maybe the name and shame thread has more….if you really want to keep the site from getting flooded then just erase the dagon topic and get rid of it don’t let it sit there with a stupid lock on it… that’s just sending the message that you don’t want people to respond to it with their own story or problem’s… which is WRONG in the first place.
So tonight I am going to post another warning and the link it sends me too, what is disturbing is that of the 387 pages that was tested on the site over the past 90 days, 73 page(s) resulted in malicious software being downloaded and installed without user consent. 73 pages! 73 pages of malicious software downloaded and installed without user consent!!!
So let’s the trail shall we!!
This site is hosted on 14 network(s) including AS4436 (AS), AS16625 (AKAMAI), AS20940 (AKAMAI).
Just AS4436 (AS) alone has 31389 site(s) that were tested on this network over the past 90 days, 32 site(s), including, for example, homoactionmovies.com/, japantwinks.com/, yardbarker.com/, served content that resulted in malicious software being downloaded and installed without user consent.
Has this network hosted sites acting as intermediaries for further malware distribution?
Over the past 90 days, we found 10 site(s) on this network, including, for example, adultadworld.com/, aetn.com/, adbrite.com/, that appeared to function as intermediaries for the infection of 38 other site(s) including, for example, nibblebit.com/, indiangilma.com/, pussystate.com/.
THAT MEANS YES!!!!!
So 14x32x16=7168 infection sites our information went to….and that is just 1 hosted network.


Posted Image

Posted Image

Posted Image

#248 Dirus Nigh

    Member

  • PipPipPipPipPipPipPipPipPip
  • 2,382 posts

Posted 16 December 2012 - 12:30 AM

Trend Micro anti virus blocked the sight for me out of the blue the other day. I guess this is why.

#249 Max Immelmann

    Member

  • PipPipPipPipPipPipPip
  • Legendary Founder
  • Legendary Founder
  • 568 posts
  • LocationPA

Posted 16 December 2012 - 02:04 AM

well, i come home from vacation, check my email, yesterday, found some funny email about windows8 fail, read it, thought it was funny as i just bought and installed windows8 last week before leaving for a much need vacation, but i certainly did not recognize the sender email. tried replying but got the mailer deamon.

then i come to the mwo forums to catch up on the latest and here i find this thread! got thru the 1st couple of pages, not gonna sit here and read all 14+ pages as my time is limited, but WTF HAPPENED???!!! i have already changed my password. gonna check to see if i have lost MC or CBills in a minute, but has there been any further attacks? has anyone suffered any other ill effects directly related to this attack?

i sure hope this is a wake-up call PGI. my confidense level has dropped considerably.

i do believe this is the 2nd time PGI has been attacked.

edit: since i just installed w8, i think i will reinstall it. takes about 4-5 hours to get all my programs up and running. thanx PGI

Edited by Immelmann, 16 December 2012 - 02:14 AM.


#250 Oderint dum Metuant

    Member

  • PipPipPipPipPipPipPipPipPip
  • Ace Of Spades
  • Ace Of Spades
  • 4,758 posts
  • LocationUnited Kingdom

Posted 16 December 2012 - 02:35 AM

View PostPaul BlackJack Cady, on 15 December 2012 - 11:48 PM, said:

I am completely surprised, ashamed and put off at the IGNORANCE that some of you members are showing!!! How dare you have the marbles to tell us that we are NOT receiving this warning just because you have stopped receiving them, floors me!
I read on another thread where a member actually calls another member a liar because he cropped his image of the warning, which in turn did not show the time or date... how in the world, why in the world would that even matter! THE MAN RECEIVED THE WARNING JUST AS I DID AND I'M STILL RECEIVING IT!


That was me, and you clearly failed at reading. I did not call him a liar i said it was interesting he had cropped it, clearly you have no idea about Vassago Rain, one of our more prolific something awful internet trolls, its just as likely that he would have taken the image on the day of the attack and just re-posted it a day later, that is the sort of person he is.

To the rest of your post, mods are locking threads for a simple reason, it's hard to interact and inform and follow several dozen threads about the same topic, which is why most of the topics are locked with a link to this very thread, the official thread makes it easier for everyone.

Quote

Everything from Norton, Firefox, MacAfee, Chrome and all the others have been reporting it, Just because you have not received the warning does not give you the right to call us liars, especially when there has been a clear and present attack against Mechwarrior Online and add to that fact the there has been an official release from Bryan Ekman the Creative Director at http://mwomercs.com/...icial-response/


Im going to assume you either skipped most of the thread, or put hand to keyboard before actually thinking, nobody here denies there was an attack, infact many tracked down what pages the injection was put into and posted here.

What people are actually saying is that at this point in time, it doesn't make sense, as if Firefox and Chrome etc etc were listing the site as still containing malware that would apply to all, and everyone would get the warning.

I use Chrome as my default browser, it gives me no warning even with a clean cache.
I also have a Firefox install (only since the hack the other day) and again clean cache i get no warning navigating here through pre existing bookmark or via google search.

It appears that only a minority of users are still getting the restriction messages, which is what is somewhat odd.

Edited by DV McKenna, 16 December 2012 - 02:36 AM.


#251 Moffo

    Rookie

  • 4 posts

Posted 16 December 2012 - 02:37 AM

View PostLon3Wo1f, on 14 December 2012 - 05:35 PM, said:

As there still seems to be some doubt over things it's hard to accept this without a followup response from PGI. It's clear to me and others that email addresses were stolen from PGI as we have something in common. We all used email addresses that were unique to MWO and got the spam email there the same day. For me I have my own domain and sign up to new sites using addresses unique to them. It's a spam paranoia thing for me (probably others too) and allows you to see what sites have sold your details on for future reference but it also shows up clearly when someone says your address hasn't been taken.


/This

Same to me. I have 2 MW:O Accounts ('cause I've 2 PCs here at home, and sometimes going to play with a friend or so), each with a unique and only-in-use-with-MW:O adress. Both got the spam-mail, at t the same time. This happened not accidentely. But PGI tell me, that my Emailadress is safe (?).
What's wrong with you, PGI? Bad things happens every day, but WHY deny them?
If you are not able to detect the hole in your fence, why treat us like sheeps?

#252 Oderint dum Metuant

    Member

  • PipPipPipPipPipPipPipPipPip
  • Ace Of Spades
  • Ace Of Spades
  • 4,758 posts
  • LocationUnited Kingdom

Posted 16 December 2012 - 02:37 AM

View PostImmelmann, on 16 December 2012 - 02:04 AM, said:

edit: since i just installed w8, i think i will reinstall it. takes about 4-5 hours to get all my programs up and running. thanx PGI


There is no real need, as long as Virus Scans and Adware scans come back clean.
I know firefox stores malware warnings in a cache file locally, i wonder if that is why some users are still getting the warnings.

Edited by DV McKenna, 16 December 2012 - 03:10 AM.


#253 Max Immelmann

    Member

  • PipPipPipPipPipPipPip
  • Legendary Founder
  • Legendary Founder
  • 568 posts
  • LocationPA

Posted 16 December 2012 - 05:08 AM

as an added bonus, i am now getting SPAM mail from an unknown source trying to sell me junk.

thanx again PGI. now i will have to change my email addy.

#254 Attalward

    Member

  • PipPipPipPipPipPip
  • Knight Errant
  • Knight Errant
  • 382 posts
  • LocationSpain

Posted 16 December 2012 - 05:16 AM

At this time the mwomercs.com/forums site is still flagged as dangerous using firefox from Spain.

#255 Tirick Fire

    Member

  • PipPipPipPipPip
  • Elite Founder
  • 172 posts
  • LocationOntario, Canada

Posted 16 December 2012 - 07:04 AM

I'm still getting the warning, although only on the Forums, and mostly once I've logged in.

#256 Sevaradan

    Member

  • PipPipPipPipPipPipPip
  • 909 posts
  • LocationTexas

Posted 16 December 2012 - 08:11 AM

View PostImmelmann, on 16 December 2012 - 05:08 AM, said:

as an added bonus, i am now getting SPAM mail from an unknown source trying to sell me junk.

thanx again PGI. now i will have to change my email addy.


yep same here, and I wasn't even logged in during the attack and i got the win8/xmas hate spam

#257 Paul BlackJack Cady

    Member

  • PipPipPipPipPipPip
  • 467 posts
  • Google+: Link
  • LocationLyran Sector, Planet: Canal, Primary Base HQ

Posted 16 December 2012 - 09:10 AM

View PostDV McKenna, on 16 December 2012 - 02:35 AM, said:

That was me, and you clearly failed at reading.
Im going to assume you either skipped most of the thread, or put hand to keyboard before actually thinking, nobody here denies there was an attack, infact many tracked down what pages the injection was put into and posted here.



Well at least you called yourself out on that one and I don't have to be reported to the name and shame thread B) BTW: why would you even do that?

Also I'm amazed how you can even start trying to flame me, when all I did was state the facts. All I need to do is go back through the forums and copy and paste the denials of an attack...it's funny that you even deny that there are even denials…

I read every little piece of information down to the last semi-colon. But thank you for your vote of “no-confidence” in my reading ability… :lol:

In you lame excuse that (nobody here denies there was an attack, infact many tracked down what pages the injection was put into and posted here.)
Is clearly apparent that you don’t read beyond this one thread, in website support and others there must be 20 topics regarding how this is a fake attack or misleading members to MWO's way of trying to reset everyone to 0 to just plan “denial” of attack..
And
Sir; I was one of them, I have been in contact with people you don’t even know working on this problem, but you most likely won’t believe that either, so even in writing this reply I know it will fall on deaf ears. I just hope others won’t feel scared or afraid to voice their opinions in the wake of insecure people like you.

#258 Taizan

    Com Guard

  • PipPipPipPipPipPipPipPip
  • 1,692 posts
  • LocationGalatea (NRW)

Posted 16 December 2012 - 10:35 AM

View PostSevaradan, on 16 December 2012 - 08:11 AM, said:

Quote

Immelmann, on 16 December 2012 - 02:08 PM, said:
as an added bonus, i am now getting SPAM mail from an unknown source trying to sell me junk.

thanx again PGI. now i will have to change my email addy.



yep same here, and I wasn't even logged in during the attack and i got the win8/xmas hate spam

Dito. Unique mail address was spammed, but luckily only one message, changed password anyway.

#259 Paul BlackJack Cady

    Member

  • PipPipPipPipPipPip
  • 467 posts
  • Google+: Link
  • LocationLyran Sector, Planet: Canal, Primary Base HQ

Posted 16 December 2012 - 11:07 AM

Still getting the warning...

But guess WHAT now my friends and fellow mechwarriors!!!!

Stupid me went to walk my favorite doggie and then jumped in the shower to clean up since it is raining here like cat's and dog's (no pun intended) hehehe.
just to be greeted by this when I sat down to start painting and doing me signature thing!!!

Posted Image

#260 Paul BlackJack Cady

    Member

  • PipPipPipPipPipPip
  • 467 posts
  • Google+: Link
  • LocationLyran Sector, Planet: Canal, Primary Base HQ

Posted 16 December 2012 - 11:15 AM

I guess I'm screwed, my email is hacked, MWO got attacked, now I've got virus's popping up..

And to think I have never had this computer online ever, this was my personal gaming computer that was never ever hooked to the internet...I just got it out of storage two week's ago thinking It could play this game but it can't. so I kept it hooked up to do my signatures and mech painting due to the fact it has a great 32" LCD screen and two graphics cards plus it run's XP like no other machine I have ever built. hell of a lot better than the laptop I was using....

So now I'm going to unplug this wonderful machine, take it to my friends computer shop, get it DEBUGED! and never hook it back up to the internet.

I am going back to my laptop.

Edited by Paul BlackJack Cady, 16 December 2012 - 11:16 AM.






5 user(s) are reading this topic

0 members, 5 guests, 0 anonymous users