the duplicate Truth

Originally posted by JediMaster
How do you find that stuff out William? Anyway can somethingbe done about the spam?

The right tools in the right hands are a very helpful thing.

But the wrong tools in the wrong hands... well...

Kudos to the admins and mods for clearing up that mess rather quickly.

This was a relatively well-researched attack on the type of code running the ATS forums. This user was able to put just the right combination of characters in the posts and subject lines to prevent normal deletion.


Bob88 performed a rather nice piece of quick thinking by deleting all posts from the "Truth." user. He and his IP have been banned.


We have the user's access point and it appears as though he was using his employer's network for hacking activity. One of the items we will consider is making contact to inform his employer's IT manager of this activity.

YEA "this is Nuh" also imed me but it is rather easy to get ur s/n because all that have been imed have had there s/n posted on ATS see the link unless ur someone who has been contacted and has not posted ur sn anywhere on the board.

good job mods/admin crew

so u guys just deleted the user its ironic cuz bob88 and i were talking on friday about what happens when a user is deleted

ok just to finish up on the evening's entertainment, my hotmail account was hacked by the mcqueen scion and I also received an email of someone pretending to be Truth saying that their forum account had been hacked into and locked.

Just be careful of who you talk to on AIM, consider changing your passwords and if you get an email off another forum member saying their account is locked and could you post something up telling people not to believe the imposter, then be very sceptical of it

Originally posted by arc
my hotmail account was hacked by the mcqueen scion and I also received an email of someone pretending to be Truth saying that their forum account had been hacked into and locked.

i'm hoping this is an irrelevant case...
but i cannot access my email account either.
once i log into my shell account... the window just closes right before i could take a glance at the motd.

The pw on my email acct is changed. >:|

I dont know how relevant this is if at all, but I looked at the member list where the imposter spammer "truth." registered, and the person who signed up right before him was also called "truth[]". I just wanted to point this out in case they were going to try something stupid again under that id.

well spotted PM, I'd say that was very relevent. Within a short space of time we had

Truth[]
Truth
JLock

now JLock you say you've been hacked - how odd when you've only just joined. Plus your posts so far have all been kind of odd. Why join a conspiracy forum and immediately start asking what people's favourite films are?

JLock is also using a server from Hong Kong for Internet access.

He/she/it is either from HK, or using a slave for Internet IP masking.

sorry william I must have missed something here. You said 'also'. Was the person responsible for last night's spree also using a HK based server?

D'oh

Sorry, didn't mean it to come across like that.

No. But we have had suspicious users from Pacific Rim nations.

Yesterday's attack was from El Paso, TX. See my post in this thread exposing the user's possible employer.

yes I noticed the El Paso information , hence my confusion! Makes sense now though

"Truth" IM'd me and sent me an email asking to help him with his locked account. WilliamOneSac emailed me as well. And today when I signed on to the forum I had a U2U message from JLock saying that I kept emailing him. Ive never even talked to JLock. I guess the McQueen Scion hacked my account. I dont know if all of these people are imposters or not I guess its safe to say that you cant trust many people here?

[Edited on 17-3-2003 by Tetsuo-51]

Hi all, sorry I missed out on all the excitement...
The weather was just too nice for me to be in the house, but I am back online today. So what happened??
I was reading over the posts and this seems like what happened Friday, when I got an email from Tyler that he didn't send. Do you believe it is a group or one person that is perpetrating these attacks??

_____________________________________________
Be Cool
K_OS

Originally posted by Tetsuo-51
"Truth" IM'd me and sent me an email asking to help him with his locked account. WilliamOneSac emailed me as well. And today when I signed on to the forum I had a U2U message from JLock saying that I kept emailing him. Ive never even talked to JLock. I guess the McQueen Scion hacked my account. I dont know if all of these people are imposters or not

I guess its safe to say that you cant trust many people here?

[Edited on 17-3-2003 by Tetsuo-51]

If you still have those e-mails, could you send the header information to me as a U2U?

Thanks.

Sorry William, I already deleted them though.

You guys don't by chance think that maybe we have came across something in the threads do you?
All of the sudden lots of new members, then the forum gets hacked.
Could it be that we have stumbled across something and (the all mighty) "they" are trying to divert our attentions.
Possibly to let the thread slip between the cracks?!?!
_____________________________________________
Be Cool
K_OS

K_OS: More than likely it's someone fooling around. I would suggest everyone change their ATS passwords, email passwords (good to do on occasion anyway), and remove their email addresses from their profiles.

If anyone contacts you about being an ATS member requesting help with an account let us know - and save the emails. We will inspect the header information.

If your account has been compromised there is really no way for use to verify it�s you or not as they may have changed the email address you�ve registered with � create a new account.