getting redirected when going to forum main page

[rajputwarrior]

everytime i go to neowin's forum i get redirected to another site (hxxp://dupedb.com). I have to hit stop before it redirects to visit any page on the forum...

using safari on mac os x 10.6.2

[Lewism]

Same problem here

Win7 with Minefield 3.7

[RadishTM Veteran]

Same here with Firefox 3.5.6 on Windows XP SP3 :huh:

Radish?

[jrolson]

lol, forum is hacked, not the first time ive seen this happen.

Just a lame redirect injection.

Problem in head of html, needs to be removed.

<meta content="0; URL=http://dupedb.com/" http-equiv="Refresh"/>

[Colin-uk Veteran]

This is currently being investigated & Fixed, thanks :)

[jrolson]

To stop this from redirecting, check the below setting in Firefox

[Azusa]

^ done and done.

[AaronMT]

Heh, and here I got worried I had a DNS hijack trojan. God damn.

[CuCumber]

How can this happen? I never surf bad sites. :p

[Vice]

You guys really need some better security this site has been hacked quite a few times.

[DaveLegg Developer]

This has now been resolved. Once the staff have had time to discuss and analyse the event, we will let you guys know what happened, until then, please bear with us.

[DaveLegg Developer]

We're still checking out the whole site for any more malicious content that may have been added. If you find anything, please post here or email [email protected] with a link to where it can be found, and we will remove it as quickly as possible.

[ATGC]

BANNED.

[Vice]

Not an Administrator anymore either. I wonder if his account was compromised or if this is just a precaution incase it was.

[AaronMT]

Is it likely our security credentials were compromised?

[carmatic]

is it even safe to change our neowin passwords?

[Denis W. Veteran]

Someone may have guessed Steve's account's password, hence his (temporary) bannage up there. Even then, those logging into the admin interface can't read off passwords of members, so everything seems fine at the moment.

[Azusa]

Just wondering is there any sort of anti-spy/mal/adware for things like forums and such? IE looks for things like redirects to blacklisted sites?

[Klownicle]

Someone may have guessed Steve's account's password, hence his (temporary) bannage up there. Even then, those logging into the admin interface can't read off passwords of members, so everything seems fine at the moment.

Guessing seems a bit much considering you would hope most of these forums have a feature that blocks too many invaild attempts. Not sure if neowin uses such a tool.

[carmatic]

Someone may have guessed Steve's account's password, hence his (temporary) bannage up there. Even then, those logging into the admin interface can't read off passwords of members, so everything seems fine at the moment.

the best case scenario is if Steve himself came home a tad bit too drunk after a Christmas night out??

[tomwarren Veteran]

The developers are still investigating but this looks like an isolated case where Neobond's account was accessed and used to put a redirect on the forum.

[RoomKid]

Thats the reason why a post was made on the front page stating that the forums had been taken offline. I couldn't read it as when I clicked it, the news post was already deleted.

Eventhough over credentials are being compromised, no biggie. IPB uses a hashing algorithm. Its just impossible to decode it.

[xSaimex]

"Its just impossible to decode it. "

:) And who told you that? Crack IPB's passes is easy as 1,2,3, do some research. :)

[Growled Member]

Every forum gets hacked eventually, it seems. Glad this one is being resolved quickly.

[Rob2687]

It's not the first time it's happened here... The last time someone compromised the site they posted a virus and I downloaded it. :pinch: