Sugah's Place Hacked AGAIN!

[Witchboy]

I would have posted this in the other thread but it seems it is locked & there is no reply button so im adding it here.

Sugah's Place has been hacked again. This time they not only hacked her site but they also hacked into her Photobucket account replacing all pics with pron & hacked into her Mediafryer account. The same pron that was used in the attacks on Me & ShanOw last July. It is also the same pictures that were used when Sim Control was hacked.

[Pescado]

Are we talking about the SAME attack, or a NEW attack? This all seems very random, given that this "Sugah" person is not connected either TSR or here, and I've never heard of them. I am not convinced this is necessarily a related incident without more information on the MO. The porn images don't mean much, such images are typically stock images found easily on the Interwebs. Additionally, hamfisted repair efforts, at this point, will have eliminated any useful evidence that I could look at.

[Witchboy]

Are we talking about the SAME attack, or a NEW attack? This all seems very random, given that this "Sugah" person is not connected either TSR or here, and I've never heard of them. I am not convinced this is necessarily a related incident without more information on the MO. The porn images don't mean much, such images are typically stock images found easily on the Interwebs. Additionally, hamfisted repair efforts, at this point, will have eliminated any useful evidence that I could look at.

This is a new attack. The pron used in the latest attack is Goatse pron, the same pron that was used in the attack on Me & ShanOw in July 2009, S2A in December 2009 & was also used in the attack on Sim Control. The IP used in the 1st 3 attacks was the same. As for the IP used to hack Sim Control i don't know. As for the Goatse pron, somewhere on Coconut's blog theres a post about ATWA using Goatse pron to spam the forums on TSR. I've looked for it again but cannot seem to find it. Maybe Coconut can confirm this?

Someone over at BPS has suggested that since Sugah has a forum subject about the infamous Blue Soup online petition it just might be the reason why she's being hacked.

[Pescado]

Yeah, I'm having a sense of deja vu here, with this same conversation on MATY as well. So...same as there: Goatse is not very unique or original.

[Witchboy]

Yeah, I'm having a sense of deja vu here, with this same conversation on MATY as well.

Hehehe

Would you be able to tell anything by a cached page from google of her site? Her site is completey gone now but theres a cache of the hacked pages with pron here...
http://74.125.155.132/search?q=cache:hOsLr7bDvp4J:sugahsplace.forumotion.net/+http://sugahsplace.forumotion.net/&cd=1&hl=en&ct=clnk&gl=us

Edit...

Her site is back up but theres a warning message & pron still visable.
http://sugahsplace.forumotion.net/

[ShanOw]

URGH! I feel so sorry for her, she says she is emailing Photobucket - I can tell her right now that it a TOTAL waste of time.

I recognize one of the images (the capsicum in the anus) as the exact one that replaced my signature image on a few forums, I would hazard a guess and say that this is connected in some way.

[Witchboy]

I recognize one of the images (the capsicum in the anus) as the exact one that replaced my signature image on a few forums, I would hazard a guess and say that this is connected in some way.

I too recognize some of the images. It's like their using the same ones over & over again.

[ShanOw]

...And they attack both a forum and a photobucket account presumably using the same password
Sound familiar?
...
...
Coincidence..?

[Pescado]

That's Tubgirl. The google cache image of the site suggests the site itself was not tampered with, and that the Botophucket images linked were simply altered. This is the true peril of hotlinking. Forget that crap about bandwidth theft. Hotlinking my files gives ME the power to control YOUR site's content by splattering crap like THAT on it. Faced with THAT, I guarantee that the person doing the hotlinking will pull it down REAL fast and probably be banned from the site they did it on.

However, it does not tell us anything about a hacking, or even prove that one took place. I mean, it's Botophucket. Botophuckets are hacked all the time. The familiarity of those images is meaningless. As a veteran of the Internets, I can tell you that those are stock images of sufficient infamy that they have PROPER NAMES recognizeable to ANY veteran. Tell them it was Tubgirl, and they ALL know what you mean.

[dstar]

This is getting fucking ridiculous- if whatever idiot is doing this is doing this with TSR encouragement and thinks this is a way to get free sites shut down- it is only giving us more reason to stay going. If this is not TSR related, whatever fuckwit 12 that is doing this needs to have their computer privileges revoked until  they are at least an 18 if not a 32. Poor Sugah .

[Quorneater]

I am now convinced these hackings have a different motive from the one claimed.  One a lot closer to the site owners than TSR.

[Pescado]

Well, SOME Of these certainly seem unrelated. I don't see any Sugah-TSR connection at all, given that this Sugah is largely an unknown on this side of the fence and has no affiliations of any kind with the pirate movement, and the attacks are closer to a conventional script-kiddy MO of vandalize-and-run. Of course, a possible explanation is that the dox list may have leaked out onto the public Internets by now, and therefore this string of attacks is now being carried out by people unconnected to the community, even if its root origin remains TSR. But that is speculation and nowhere close to the reasonable doubt level.

[Quorneater]

The only thing all these hacks have in common is that they are noticed first and reported by Witchboy.   The one person you can always rely on to be first at the scene of a fire.

[Witchboy]

The only thing all these hacks have in common is that they are noticed first and reported by Witchboy.   The one person you can always rely on to be first at the scene of a fire.

*rubbernecks & runs outta the thread*

[Pescado]

That does seem rather interesting, but how can he be related to all these people?