Tweet
Hello,
Tonight we had a serious problem on our forum www.habboxforum.com . Somehow it seems somebody was able to send Personal Messages from certain accounts without accessing those accounts.
There was one PM sent from my account to another admin, asking for admin rights for a certain user. I never sent this message myself, it happened while I was online, and it seems my account was never accessed.
Also 2 other PMs were sent from another (admin) account, while the person never sent them himself.
Does anybody have any idea how this could have happened? We can only see this is possible if a hacker gained access to our MySQL, but if that was the case, he could do much more damage than just sending a message trying to trick somebody into giving him admin rights?
We changed our forum passes, cpanel and mysql passes but we still don't know what happened.
Thanks
Tonight we had a serious problem on our forum www.habboxforum.com . Somehow it seems somebody was able to send Personal Messages from certain accounts without accessing those accounts.
There was one PM sent from my account to another admin, asking for admin rights for a certain user. I never sent this message myself, it happened while I was online, and it seems my account was never accessed.
Also 2 other PMs were sent from another (admin) account, while the person never sent them himself.
Does anybody have any idea how this could have happened? We can only see this is possible if a hacker gained access to our MySQL, but if that was the case, he could do much more damage than just sending a message trying to trick somebody into giving him admin rights?
We changed our forum passes, cpanel and mysql passes but we still don't know what happened.
Thanks