JoomlArt Forums 32,862 posts

[tldagent Friend tldagentJoin date: February 2006Posts: 37Downloads:0Uploads:19 Thanks: 6]

#203337

I just received an email from soshkt@gmail.com and it included 84 pages PDF of users names and passwords from the idev affiliate table of Joomlart. Nothing is encrypted. I see it all. Here’s the message on top of the PDF:

<blockquote>Hi .This is your details from Joomlart.com Affiliate program
all your password are not decoded and they can see your password
If you need more details contact us soshkt@gmail.com
We have 360000 Joomlart’s forum users email that you can use for ads</blockquote>

I won’t post the info or an image but I can tell you my full name, email address and password are in this list along with username.

Someone better do something about this FAST!

[tldagent Friend tldagentJoin date: February 2006Posts: 37Downloads:0Uploads:19 Thanks: 6]

#557698

The actual database table is: Database: joomlart_user, Table: idevaff_affiliates

[mspritely Friend mspritelyJoin date: May 2008Posts: 5Downloads:0Uploads:0 Thanked: 1 times in 1 posts]

#557702

I also received the same email and can confirm that the info sent is VERY REAL..
Joomlart — You have been hacked and I cant believe that you stored our passwords in PLAIN TEXT .

This is just awful .

the cats out the bag – I can suggest to EVERYONE that they change passwords now

What an awful breach of your security and failure to keep our info private

1 user says Thank You to mspritely for this useful post

1. tldagent

[tldagent Friend tldagentJoin date: February 2006Posts: 37Downloads:0Uploads:19 Thanks: 6]

#557703

<em>@mspritely 456316 wrote:</em><blockquote>I also received the same email and can confirm that the info sent is VERY REAL..
Joomlart — You have been hacked and I cant believe that you stored our passwords in PLAIN TEXT .

This is just awful .

the cats out the bag – I can suggest to EVERYONE that they change passwords now

What an awful breach of your security and failure to keep our info private</blockquote>

Everyone change your password. I tested a random account and was indeed able to login to paypal and see everything. I immediately called paypal and someone from the executive team is going to call me back shortly.

Everyone change every password.

[mspritely Friend mspritelyJoin date: May 2008Posts: 5Downloads:0Uploads:0 Thanked: 1 times in 1 posts]

#557704

I did a search on the email sender and found that he has offered a list of user names before
Here is the link to the google search
soshkt@gmail.com
https://www.google.com/search?q=soshkt%40gmail.com&oq=soshkt%40gmail.com&aqs=chrome..69i57j69i58.199j0j4&sourceid=chrome&es_sm=119&ie=UTF-8

He posted on the joomla message board on Nov 25th.
Cant tell if he is offering the same list of names but he certainly cracked the Joomlart database and is selling ours now

Joonlart – PLEASE address this issue
All others – PLEASE change your passwords now !!!! especially paypal

[tldagent Friend tldagentJoin date: February 2006Posts: 37Downloads:0Uploads:19 Thanks: 6]

#557705

I’ve contacted the fraud department at PayPal and gave them the user email that I was easily able to login to on Paypal so they are working on it right away.

I’ve sent an email to Hung but haven’t heard anything back. Tried to contact Tucows to temporarily shut down access to the domain, no avail. Not many seem to be able to see this forum post so I’m not sure what else to do but this needs to be addressed

IMMEDIATELY!!!!

[vivacomputers Friend vivacomputersJoin date: March 2011Posts: 152Downloads:0Uploads:1 Thanks: 26 Thanked: 4 times in 1 posts]

#557724

I also got the email just now! I have changed my password at least for the most important sites. Here for Joomlart a different one because I don’t trust it anymore……but I want to keep in touch for news.

It is a big shame that they got hacked specially with all the payment information that is stored here!

Joomlart get your act together!

[Arvind Chauhan Moderator Arvind ChauhanJoin date: September 2014Posts: 3835Downloads:74Uploads:92 Thanks: 1240 Thanked: 1334 times in 848 posts]

#557725

Hi Guys,

Yes its a very serious issue and we are already working on it. The affiliate system has been taken down and we are sending out emails to all the affiliate accounts to update them of the breach and change their passwords.

Apart from our tech guys, we have hired server security person to analyze the extend of breach.

We are putting up a blog post soon to inform all and will keep updating as we get more details.

Arvind

[Arvind Chauhan Moderator Arvind ChauhanJoin date: September 2014Posts: 3835Downloads:74Uploads:92 Thanks: 1240 Thanked: 1334 times in 848 posts]

#557726

Hi Guys,

Yes its a very serious issue and we are already working on it. The affiliate system has been taken down and we are sending out emails to all the affiliate accounts to update them of the breach and change their passwords.

Apart from our tech guys, we have hired server security person to analyze the extend of breach.

We are putting up a blog post soon to inform all and will keep updating as we get more details.

Arvind

[triumph Friend triumphJoin date: May 2010Posts: 17Downloads:0Uploads:0 Thanks: 2 Thanked: 1 times in 1 posts]

#557727

I received the same email this afternoon. My account, email address, username and password are now public knowledge.

Why has Joomlart NOT notified ALL of its members???

I’m really disappointed that there has been no response from the Joomlart team on this matter.

I’ll be spending the entire day reviewing and changing logins/passwords throughout my company.

Every supplier from now on will have a different password.

[Arvind Chauhan Moderator Arvind ChauhanJoin date: September 2014Posts: 3835Downloads:74Uploads:92 Thanks: 1240 Thanked: 1334 times in 848 posts]

#557730

Hi Triumph,

We are sending out emails as I write this. We have been working on it since we knew of it few hours back. Blog is also coming up and we would be updating it as we have more information. We have also reached out to hacker apart from asking close friends to help with server audit and get the full extent of the breach. Only the affiliate system has unencrypted passwords and it was to be replaced with other system soon.

I know its a serious lapse and we are in damage analysis and control.

Will keep you updated

Arvind
Operations Manager

2 users say Thank You to Arvind Chauhan for this useful post

1. pavit
2. Manos

[James Weston Friend James WestonJoin date: September 2014Posts: 1030Downloads:11Uploads:70 Thanks: 408 Thanked: 16 times in 1 posts]

#557733

Does this effect regular template club members?

[pavit Moderator pavitJoin date: September 2007Posts: 15749Downloads:199Uploads:2274 Thanks: 417 Thanked: 4028 times in 3778 posts]

#557738

Hi @origomedia

<blockquote>Does this effect regular template club members?</blockquote>

Please take a look at blog post HERE

[Arvind Chauhan Moderator Arvind ChauhanJoin date: September 2014Posts: 3835Downloads:74Uploads:92 Thanks: 1240 Thanked: 1334 times in 848 posts]

#557739

<em>@origomedia 456356 wrote:</em><blockquote>Does this effect regular template club members?</blockquote>

Not in terms of passwords as all are encrypted. We will still enforce a hard reset for all users across all our sites as soon as our server security is confirmed. We are also negotiating with hacker to get more details. We have the blog up and all updates will be pushed to it. Our first responsibility is towards our members and with that in mind we are trying our best. Sit tight, if you are using common passwords better to change them.

Regards

Arvind

[Author]

Posts