HOME | DD

CHRISwillar — Hacker Alert (Read, No Panic - ended)
Published: 2012-11-25 22:06:56 +0000 UTC; Views: 10080; Favourites: 170; Downloads: 0
Redirect to original
Description body div#devskin8853160 .journalbox { text-decoration:none; background-color:#cfe0bc; background-image:url(https://fc00.deviantart.net/fs42/o/2009/136/b/b/122695303_68394_header2.jpg); background-repeat:no-repeat; background-position:top left; border:none; max-width:1200px; text-align:left; } body div#devskin8853160 .journalbox .journaltop img { display:none; } body div#devskin8853160 .journaltop { font-size:10px; color:#19414B; text-align:center; background-color:transparent; padding:0px 0px 0px 0px; } body div#devskin8853160 .journalbox .journaltop h2 { color:#cddfbb; font-size:22px; font-family:Arial, Verdana, Helvetica, sans-serif; font-weight:normal; background-color:transparent; text-align:center; letter-spacing:2px; padding:290px 0px 0px 0px; margin:0px 0px 0px 0px; } body div#devskin8853160 .list { color:#19414B; font-size:11px; padding:20px 0 60px 15px; } body div#devskin8853160 .a { background:transparent!important; } body div#devskin8853160 .list li { padding:2px; } body div#devskin8853160 .journalbox a { color:#19414B !important; text-decoration:underline !important; } body div#devskin8853160 .journalbox a:hover { color:#19414B!important; text-decoration:none!important; } body div#devskin8853160 .journalbottom { font-family:Verdana, Arial, Helvetica, sans-serif; color:#19414B; font-size:14px; _padding-top:20px; padding-bottom:20px; } body div#devskin8853160 .journalbox .journalbottom a:hover { color:#19414B!important; } body div#devskin8853160 .title { font-size:20px; text-align:left; padding:0px 0px 0px 0px; border-bottom:1px solid #19414b; width:90%; letter-spacing:0px; color:#19414b; font-weight:bold; } body div#devskin8853160 .journalbox .journalbottom { background-color:transparent!important; padding-top:6px; } body div#devskin8853160 .journalbox .journaltext { color:#000 !important; font-family:Century Gothic, Arial, Verdana, Helvetica, sans-serif; font-size:15px; padding-top:0px; margin:0px 10px 0px 10px; } body div#devskin8853160 .navi { position:absolute; top:0px; left:0px; padding:20px 110px 0px 15px; font-size:16px; font-family:'Trebuchet MS', Verdana, Helvetica, sans-serif; color:#cddfbb; } body div#devskin8853160 .navi a { color:#cddfbb!important; text-decoration:none !important; } body div#devskin8853160 .navi a:hover { text-decoration:none !important; } body div#devskin8853160 .credit { font-weight:bold; font-family:Arial, sans-serif; position:absolute; left:6px; bottom:35px; font-size:11px; padding:0 5px 0 10px; } body div#devskin8853160 .minigal .shadow { background-image:none!important; } body div#devskin8853160 .minigal a { display:inline-block; width:63px!important; height:63px!important; line-height:63px; overflow:hidden; position:relative; z-index:1; } body div#devskin8853160 .minigal a img { position:absolute; top:-10px; left:-20px; } body div#devskin8853160 .minigal a:hover { overflow:visible; z-index:99; border:none; }

Hey guys; this is just a small warning - there's currently a hacker group going around on dART that steals your login info by using already hacked accounts. Simply, by use of coding, this group has changed the url path of several accounts (one of their tricks is by posting a comment on your works, claiming it has been stolen, followed by a link), so that when you go to visit their profile page, you are instead redirected to what seems to be the dART login page. But it's not! If you take a look at the url, you will see that it's in fact not a dART url at all. This what the fake login page looks like:

:thumb339665102:


One of the victims is neomoti - she has been accused for being the hacker, but this girl is not at fault; the hacked account is still in their possession, so she has opened another instead to start over -> XxneomotixX; she explains it in this video: www.youtube.com/watch?v=A-tVxQ… (reuploaded)

The REAL hacker is apparently the group Dong Force: twitter.com/dongforcer (twitter account) & www.facebook.com/dongforcer (facebook account)
They claim to already have info for hundreds of dART accounts, and they plan to disclose them. gary-niger is part of the group.
"Troll coallition causes fear among the people of DeviantArt", article by the group about this attack: bosslegen.de/nf/2012-11-25-dev…


Don't panic, just be aware of this; If you are already logged into dART but gets a login page when trying to visit another account's profile page - check the url before typing in your information! Use your common sense. Please spread this around, so that others won't fall victim. And if you want to troll these hacker, then you can type in false info in the fake login; the hackers have to go through all login info, and this might slow them down Peace!

Lists of released info on hacked accounts: pastebin.com/tvVwUPaD pastebin.com/iubn84Kq pastebin.com/2ZMimeJm - latest: pastebin.com/PrpQeTZF ~ all the (almost 2400) hacked accounts' info(?) - NEW: pastebin.com/5pp0P6QX
(DF claims to have retrieved more than 2000 accounts out of "courtesy"; claims to have info on more than 2100 accounts)

EDIT: the affected accounts above no longer lead me to the fake login site, so I'm not sure if the attack is over (dART blocked the attack?). I still advice you to be careful, though. Keep an eye on everything suspicious.
The End(?): dART has successfully stopped the hackers' script, so it should be okay. However, please still be careful - you never know when another hack-attack happens again. Also, you might want to take a look on the released list of hacked accounts' info above.
Hacked? If you did type in your info on the fake login site, the hackers' script would immediately have saved your info. You can't do anything about that, but you might still be able to save yourself by changing login info, but this is not certain. Keep a close eye on your account, and if anything changes, go here:

PLEASE READ: Hacked?! Are you unable to log into your account? Then stop trying and let it be! Either it's under the hackers' control or dART's; you can't do anything. I don't know how dART works to solve the hacking, but I can imagine that they froze the accounts that have been affected, while they are trying to secure them. And if you keep messing around with it, it might disturb dART and slow the process even more. I also do not know how long it will take before you are able to get it back - it might take hours or days, depending on how serious the situation is - but there's really nothing you can do but wait and hope. Be patient!

And to those who wishes for the hackers to get hacked - are you out of your mind? That won't solve anything. Besides, hacking is illegal, no matter how you use it and on what. Just be glad it isn't Anonymous who's behind this. Please be realistic. And patient.

Also, people: stop treating me like I'm someone who has insight in this. Most of the advices here are based on common sense and knowledge, but I really don't know more than any of you. I don't mind answering your questions and trying to help. But that's all I can do. Please respect that.

Thanks for reading! I hope you all are safe and not too worried - remember, always use common sense~

Alright, darlings, it has been an honour to serve you as information provider about this incident, but I'm going to end it now. There hasn't been any news from the culprits for hours, other than pointless bragging and bashing, and the situation is now fully under dART's control. Thank you for your cooperation, and remember - be careful, be aware and always use common sense. Never panic, stay calm. Thank you.


Be vigilant of phishing scamsYour account's security is of vital importance to deviantART and we're committed to providing our members resources and advice on how to stay safe and secure online.  Earlier today, an individual or group of individuals redirected some deviantART members to a false deviantART login screen by exploiting a cross-site-scripting vulnerability in deviantART's Journal system.  This tactic, commonly known as phishing, allowed the individuals to gain access to some accounts. Phishing is a serious matter on the Web. You've probably heard of phishing attempts through emails, the classic example being a fake email from a bank or other trusted auth...
(dART's post - read)



Related content
Comments: 531

MicoNutziri In reply to ??? [2012-11-27 17:38:35 +0000 UTC]

Should I change my password? Will be VERY careful from now on O___O Im scared

👍: 0 ⏩: 1

CHRISwillar In reply to MicoNutziri [2012-11-28 00:10:22 +0000 UTC]

Do it for security reasons; changing passwords regularly is always a good idea; but don't panic.

👍: 0 ⏩: 0

ZarozAestoth In reply to ??? [2012-11-27 16:49:30 +0000 UTC]

ive come to a page like that before, but the URL didnt look like that one on the video; it was an actual dA login page URL OAO i feel the urge to change my password now

👍: 0 ⏩: 1

CHRISwillar In reply to ZarozAestoth [2012-11-28 00:09:36 +0000 UTC]

You can do it, for security reasons - changing passwords regularly is always a good idea.

👍: 0 ⏩: 0

Busy-Burd In reply to ??? [2012-11-27 04:21:00 +0000 UTC]

I feel really bad...
And I know I shouldn't because I haven't done anything wrong, but I feel bad for neomoti. I saw that people kept jumping to the conclusion that this was all her fault.

I guess this is what happens when people panic

👍: 0 ⏩: 1

CHRISwillar In reply to Busy-Burd [2012-11-28 00:07:26 +0000 UTC]

People can be horrible once they panic.. innocents get blamed
Don't feel bad, though, if you have done nothing wrong.

👍: 0 ⏩: 1

Busy-Burd In reply to CHRISwillar [2012-11-28 04:46:07 +0000 UTC]



So I guess we have to try and be as level headed as possible from now on then?

👍: 0 ⏩: 1

CHRISwillar In reply to Busy-Burd [2012-11-28 04:51:53 +0000 UTC]

Yup~

👍: 0 ⏩: 0

DarkJanet In reply to ??? [2012-11-27 02:55:26 +0000 UTC]

IS a hacker and cyberbully. I have to report him. This guy is my enemy who just called me a troll.

👍: 0 ⏩: 1

CHRISwillar In reply to DarkJanet [2012-11-27 03:41:26 +0000 UTC]

Doesn't seem like it, though? And calling someone a troll doesn't equal bullying...

👍: 0 ⏩: 1

DarkJanet In reply to CHRISwillar [2012-11-27 03:51:41 +0000 UTC]

Well, that's my only problem when I was being cyberbullied since last year. I gotta write to Obama. Obama won this election, maybe he can help me out.
This website is called snafu-comics.com. I joined there and all of a sudden I was being cyberbullied and I don't know why.

👍: 0 ⏩: 1

CHRISwillar In reply to DarkJanet [2012-11-27 04:02:58 +0000 UTC]

I doubt Obama would be able to help you. Contact the admins instead.

👍: 0 ⏩: 1

DarkJanet In reply to CHRISwillar [2012-11-27 06:15:20 +0000 UTC]

All right, then. I gotta become an entertainer to run a show on HBO & MTV.

👍: 0 ⏩: 1

CHRISwillar In reply to DarkJanet [2012-11-28 00:32:15 +0000 UTC]

Yeah, you go do that.

👍: 0 ⏩: 1

DarkJanet In reply to CHRISwillar [2012-11-28 00:32:52 +0000 UTC]

Right!

👍: 0 ⏩: 0

RimaMoonBlade In reply to ??? [2012-11-27 02:33:31 +0000 UTC]

I've been like that!
good thing I changed my password.

👍: 0 ⏩: 1

CHRISwillar In reply to RimaMoonBlade [2012-11-27 03:39:38 +0000 UTC]

Please still keep an eye on your account~

👍: 0 ⏩: 0

luv-luv-luvie In reply to ??? [2012-11-26 23:41:31 +0000 UTC]

It's good that I actually changed my password o.o

👍: 0 ⏩: 1

CHRISwillar In reply to luv-luv-luvie [2012-11-27 01:47:30 +0000 UTC]

Please still keep an eye on your account~

👍: 0 ⏩: 1

luv-luv-luvie In reply to CHRISwillar [2012-11-27 01:55:12 +0000 UTC]

I will^^ you should too! :3

👍: 0 ⏩: 1

CHRISwillar In reply to luv-luv-luvie [2012-11-27 03:43:51 +0000 UTC]

Always

👍: 0 ⏩: 1

luv-luv-luvie In reply to CHRISwillar [2012-11-27 03:54:15 +0000 UTC]

👍: 0 ⏩: 0

KanadeAkatsuki In reply to ??? [2012-11-26 23:09:52 +0000 UTC]

Poor neomti.... THOSE BASTERS HAVE REACHED THE LAST STRAW!!!! TIMES UP!!! D:<

👍: 0 ⏩: 1

CHRISwillar In reply to KanadeAkatsuki [2012-11-27 01:47:47 +0000 UTC]

👍: 0 ⏩: 1

KanadeAkatsuki In reply to CHRISwillar [2012-11-27 11:51:28 +0000 UTC]

______8
_____88
____888
___8888
____88
____99
____99
___(((-))

👍: 0 ⏩: 0

Patchheart In reply to ??? [2012-11-26 23:00:03 +0000 UTC]

Thanks for posting this!

Anywho, what song is playing in that video..?

👍: 0 ⏩: 1

CHRISwillar In reply to Patchheart [2012-11-27 01:48:15 +0000 UTC]

You're welcome~

And I have no idea; it isn't mine

👍: 0 ⏩: 1

Patchheart In reply to CHRISwillar [2012-11-28 20:58:24 +0000 UTC]

Otai, thanks anyways. It was really nice to know!

👍: 0 ⏩: 1

CHRISwillar In reply to Patchheart [2012-11-28 23:27:05 +0000 UTC]

No problem~

👍: 0 ⏩: 0

TDGLover4eva In reply to ??? [2012-11-26 22:29:00 +0000 UTC]

You...are amazing. You were so in-depth with this journal, and it's surprising how many DA logins they got (especially the fake ones). For this, I thank you for sharing this information with all of DA. We're all spreading the word of this...I'm going to spread this journal around so that now everyone knows this. Again, thank you.

👍: 0 ⏩: 1

CHRISwillar In reply to TDGLover4eva [2012-11-27 01:49:00 +0000 UTC]

You're very welcome, it was a pleasure to be of some help~

👍: 0 ⏩: 0

FoxBluereaver In reply to ??? [2012-11-26 22:17:25 +0000 UTC]

Me mantendré al pendiente. Siempre mantengo la sesión iniciada en mi máquina, así que si me aparece, sabré que es eso. Gracias por avisar.

👍: 0 ⏩: 1

CHRISwillar In reply to FoxBluereaver [2012-11-27 01:49:13 +0000 UTC]

👍: 0 ⏩: 0

flaringweasels In reply to ??? [2012-11-26 22:03:09 +0000 UTC]

It happened to me, but I quickly changed my password. But when I tried logging into my old account, it wouldn't let me. So I tried "recovering password", but it kept saying that it's a error. So I moved to this and I feel very ashamed.

👍: 0 ⏩: 1

CHRISwillar In reply to flaringweasels [2012-11-27 01:50:12 +0000 UTC]

Don't be ashamed, and don't worry too much; it sounds like dART temporarily froze your account.

👍: 0 ⏩: 1

flaringweasels In reply to CHRISwillar [2012-11-27 02:01:32 +0000 UTC]

I'm glad, but when will they let me log in to it again?

👍: 0 ⏩: 1

CHRISwillar In reply to flaringweasels [2012-11-27 03:43:10 +0000 UTC]

I honestly don't know, it depends on the status of the situation.

👍: 0 ⏩: 0

Lizziesphotos In reply to ??? [2012-11-26 21:55:00 +0000 UTC]

thats actually kinda nerve rackin, thanks for the update

👍: 0 ⏩: 1

CHRISwillar In reply to Lizziesphotos [2012-11-27 01:50:30 +0000 UTC]

Yup.. you're welcome~

👍: 0 ⏩: 0

Frost-Paw123 In reply to ??? [2012-11-26 21:45:11 +0000 UTC]

Woah,dude,this is one of the first hacker stories that has actual proof! (At least that I have seen) I'll keep an eye out and spread the word,thanks for the info!

👍: 0 ⏩: 1

CHRISwillar In reply to Frost-Paw123 [2012-11-26 21:46:36 +0000 UTC]

You're welcome~

👍: 0 ⏩: 0

RockNRollGal In reply to ??? [2012-11-26 20:49:46 +0000 UTC]

This is crazy! Thanks for the info, I'll be sure to spread the word!~

👍: 0 ⏩: 1

CHRISwillar In reply to RockNRollGal [2012-11-26 20:53:11 +0000 UTC]

You're welcome~

👍: 0 ⏩: 1

RockNRollGal In reply to CHRISwillar [2012-11-26 21:01:23 +0000 UTC]

Thanks again~

👍: 0 ⏩: 1

CHRISwillar In reply to RockNRollGal [2012-11-26 21:05:38 +0000 UTC]

👍: 0 ⏩: 1

RockNRollGal In reply to CHRISwillar [2012-11-27 21:31:20 +0000 UTC]

👍: 0 ⏩: 0

bubbles987 In reply to ??? [2012-11-26 20:25:08 +0000 UTC]

Thank you so much T.T

👍: 0 ⏩: 1

CHRISwillar In reply to bubbles987 [2012-11-26 20:53:18 +0000 UTC]

You're welcome~

👍: 0 ⏩: 0

Viclesu In reply to ??? [2012-11-26 19:51:51 +0000 UTC]

thank you so much for the warning ;A;

👍: 0 ⏩: 1

CHRISwillar In reply to Viclesu [2012-11-26 20:53:23 +0000 UTC]

You're welcome~

👍: 0 ⏩: 0


<= Prev | | Next =>