looks like joomla org hacked

Post by **sc00zy** » Sat Aug 18, 2007 12:30 pm

dragonrider wrote: Now the page I see when visiting the link, shows a page full of adverts, all other links go to joomla.org/parking and an option to make an offer for the domain via sedo???

Look twice the poster posted the wrong url

He typed http://www.joomal.org.

Post by **sc00zy** » Sat Aug 18, 2007 12:32 pm

Maybe it was just a force hack on a username/password. Let's wait for more news.

dragonrider · Post by **dragonrider** » Sat Aug 18, 2007 12:33 pm

sc00zy wrote:
dragonrider wrote: Now the page I see when visiting the link, shows a page full of adverts, all other links go to joomla.org/parking and an option to make an offer for the domain via sedo???
Look twice the poster posted the wrong url He typed http://www.joomal.org.

Doh!

bennieblanco · Post by **bennieblanco** » Sat Aug 18, 2007 12:40 pm

whoever is workin on it , should remove the image first.
firefox developer extention
show image links

exrace · Post by **exrace** » Sat Aug 18, 2007 12:56 pm

How long could this take?
I still see the graphic.

Post by **sc00zy** » Sat Aug 18, 2007 12:57 pm

malikperera wrote: I just log in to http://www.joomal.org and get this, Look like site hacked

Template File Not Found! Looking for template:
- Names deleted -

Please remove the names of the hackers. You're actually giving them credits by posting their names.

thestratocaster · Post by **thestratocaster** » Sat Aug 18, 2007 12:58 pm

Hello all,

Just wondering if anyone else noticed that the main joomla site has been hacked? lol?

This doesn't say very much about Joomla security.....

Can someone explain?

[MOD note: Hacker reference removed. No need to encourage script kiddies. - pe7er]

exrace · Post by **exrace** » Sat Aug 18, 2007 12:59 pm

Surprised moderators didn't remove the image...

iwebdesign · Post by **iwebdesign** » Sat Aug 18, 2007 12:59 pm

That's really really bad.
What should I tell my customers?

I'd be glad, if the joomla.org team explains in detail, how this could have happened.

Good luck and best regards!

Post by **sc00zy** » Sat Aug 18, 2007 1:03 pm

Please remove the screenshots and names of the hackers in your posts. You're giving them credits by doing this!

Thanks!

exrace · Post by **exrace** » Sat Aug 18, 2007 1:05 pm

sc00zy wrote: Please remove the names of the hackers. You're actually giving them credits by posting their names.

You think the mods would be ALL OVER this.

Post by **sc00zy** » Sat Aug 18, 2007 1:06 pm

exrace wrote: You think the mods would be ALL OVER this.

Please note it's weekend and a lot of mods are still asleep.

joomila · Post by **joomila** » Sat Aug 18, 2007 1:09 pm

what version of Joomla is running joomla.org??

Joomla Starter · Post by **Joomla Starter** » Sat Aug 18, 2007 1:09 pm

URGENT I cant believe it The official Page of joomla org was hacked today at the moment i write this post ,
I attached a pdf file

www.joomla.org

exrace · Post by **exrace** » Sat Aug 18, 2007 1:11 pm

The admins are too I guess...

exrace · Post by **exrace** » Sat Aug 18, 2007 1:14 pm

Hummm...
I thought forums and www site on same server?

ping http://www.joomla.org
Pinging joomla.org [72.9.243.251] with 32 bytes of data:

ping forum.joomla.org
Pinging forum.joomla.org [65.254.35.66] with 32 bytes of data:

Edit: I stand corrected.

ilox · Post by **ilox** » Sat Aug 18, 2007 1:22 pm

Being discussed here... http://forum.joomla.org/index.php?topic=203014.new;topicseen#new
And I am not sure the PDF is necessary, the staff are aware of the attack. The staff have closed the site though it has again been hacked since their closure hence the change of the hack graphic for the original logo. I think there is a lot going on behind the scenes over there

Post by **sc00zy** » Sat Aug 18, 2007 1:24 pm

There are a couple of threads about this allready. Please remove the PDF. You're giving the hackers credits by posting screenshots and their namers.

Thanks!

Post by **MMMedia** » Sat Aug 18, 2007 1:28 pm

I was hoping the one that posted it would edit their own post. I was giving them time to do it. Obviously they won't, or aren't going to, so I will remove it.

ilox · Post by **ilox** » Sat Aug 18, 2007 1:28 pm

When the site was first closed it was showing the Joomla logo as expected (I have a screenshot of it). It was just a little later that the hacked image appeared, about 5-10 minutes after the first one showed up (I have a screenshot). I would hazard a guess that even though the site was closed down the hacker somehow still had access and was able to change the graphic over.
------------------------------------------------
Update: Index page now amended and that graphic has gone, thank goodness

Joomla Starter · Post by **Joomla Starter** » Sat Aug 18, 2007 1:29 pm

ok I have delete the file, it was just for help.

Post by **sc00zy** » Sat Aug 18, 2007 1:29 pm

No problem

Thanks!

rsd · Post by **rsd** » Sat Aug 18, 2007 1:34 pm

Does enyone knows if the Joomla site's host is in a Joomla owned server or if it is a shared hosting environment?

Post by **sc00zy** » Sat Aug 18, 2007 1:46 pm

rsd wrote: Does enyone knows if the Joomla site's host is in a Joomla owned server or if it is a shared hosting environment?

Joomla has got their own servers at Rochen.

GollumX · Post by **GollumX** » Sat Aug 18, 2007 1:50 pm

can anyone confirm whether joomla.org was running 1.0.13?

Post by **sc00zy** » Sat Aug 18, 2007 1:54 pm

GollumX wrote: can anyone confirm whether joomla.org was running 1.0.13?

It isn't sure yet how joomla.org got hacked. They're on it as we speak.
It's most likely joomla.org was running 1.0.13

Post by **infograf768** » Sat Aug 18, 2007 1:57 pm

Merging all similar posts.

rsd · Post by **rsd** » Sat Aug 18, 2007 2:00 pm

sc00zy wrote:
rsd wrote: Does enyone knows if the Joomla site's host is in a Joomla owned server or if it is a shared hosting environment?
Joomla has got their own servers at Rochen.

So, there is a security flaw in joomla indeed

Post by **ot2sen** » Sat Aug 18, 2007 2:04 pm

sc00zy wrote: Please remove the screenshots and names of the hackers in your posts. You're giving them credits by doing this!

Thanks!

Agree. Image removed above.

Post by **MMMedia** » Sat Aug 18, 2007 2:06 pm

It may not be in Joomla! itself. It could be in a 3PD extension.

Before making statements please wait until all the information is in. It isn't right or fair or responsible to just throw things out there that may not be true.

The Joomla! Forum™

looks like joomla org hacked

Re: look like joomal.org hacked

Re: Joomla.org Hacked

Re: look like joomal.org hacked

Re: look like joomal.org hacked

Re: look like joomal.org hacked

Re: look like joomal.org hacked

JOOMLA HACKED????

Re: joomla.org hacked?

Re: Hack Attack on the Shop ?

Re: Hack Attack on the Shop ?

Re: look like joomal.org hacked

Re: look like joomal.org hacked

Re: Joomla.org Hacked

jommla.org main page HACKED

Re: look like joomal.org hacked

Re: look like joomal.org hacked

Re: jommla.org main page HACKED

Re: jommla.org main page HACKED

Re: joomla.org hacked?

Re: joomla.org hacked?

Re: jommla.org main page HACKED

Re: jommla.org main page HACKED

Re: joomla.org hacked?

Re: joomla.org hacked?

Re: look like joomal.org hacked

Re: look like joomal.org hacked

Re: jommla.org main page HACKED

Re: joomla.org hacked?

Re: Hack Attack on the Shop ?

Re: joomla.org hacked?