Build Your Own Arcade Controls Forum

Main => Everything Else => Topic started by: alfonzotan on March 22, 2022, 02:55:49 pm

Title: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: alfonzotan on March 22, 2022, 02:55:49 pm
The KLOV message board was hacked by scammers/ransom jerks today... couple of long-term posters had their accounts hijacked and fake for-sale threads started under their identities.  The site is offline now (roughly 3PM Eastern time on Tuesday the 22nd), putting in a place-holder here for news and for posters to check in.

If you have an account there and are reusing your username and/or password anywhere else, probably a good idea to change at least your password(s) now...
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: bobbyb13 on March 22, 2022, 08:43:47 pm
Greatly appreciate that alert!
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: cdjump on March 23, 2022, 10:47:21 am
I'm here.  Totally forgot i had a username already.  At any rate, if anyone needs me,  contact me via email, or through facebook for the moment.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: Alpha-tron on March 23, 2022, 12:45:26 pm
Log in(s) has been disabled but the site responded so it seems there is progress being made.


Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: alfonzotan on March 23, 2022, 12:50:52 pm
Log in(s) has been disabled but the site responded so it seems there is progress being made.

Good news, thanks for the update.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: cdjump on March 24, 2022, 07:52:56 am
Quote
Oops! We ran into some problems.
While we work on the system, the abilty to log on is turned off. It may not return until mid-weekend.

Looks like it might be more serious than just brute forcing passwords.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: alfonzotan on March 24, 2022, 01:55:22 pm
New update added:  "Current ETA: Late Saturday (or earlier) -- everything back online."
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: Alpha-tron on March 24, 2022, 02:38:54 pm
Quote
Oops! We ran into some problems.
While we work on the system, the abilty to log on is turned off. It may not return until mid-weekend.

Looks like it might be more serious than just brute forcing passwords.

I think  forum software issues due to multiple users passwords were compromised. Definitely not a brute method. Username and password system was exposed.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: pbj on March 24, 2022, 02:51:41 pm
That sucks.
Title: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: yotsuya on March 24, 2022, 02:53:14 pm
Sucks indeed

Can’t wait to see you at ZapCon next month, Alpha.


Sent from my iPhone using Tapatalk
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: alfonzotan on March 25, 2022, 07:58:13 am
The site it back up, with some limited functionality.  Check the main forums page for the update banner.

Thanks everybody, especially the BYOAC community for the thread space.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: alfonzotan on March 25, 2022, 08:03:41 am
Would somebody please pass the word to the KLOV admins that I changed my password as soon as I saw what was going on last week, but before the site went down?  It looks like I have one of the "lucky" locked accounts.

thanks...
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: alfonzotan on March 25, 2022, 08:13:30 am
Another update, it looks like the same creeps also hit Pinside. Worth checking around, BYOAC mods...
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: offset on March 25, 2022, 10:06:09 am
Thanks for the comms channel (this thread).

MFA I'm sure would go a long way toward preventing password reuse attacks.  MFA can be painful for some, could always make it optional, but have the capability there to start.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: pbj on March 25, 2022, 10:29:37 am
Not sure if it's funny or sad that BYOAC is so irrelevant that hackers won't target us.  A combination of both, perhaps?

 :cheers:
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: Robbbert on March 25, 2022, 11:31:05 pm
KLOV was on my to-join list, but I think I needed an invite, so it never happened.

Guess I was lucky, in the end.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: pbj on March 25, 2022, 11:36:01 pm
My account at klov is so old, I made it back when you had to register at the disease forum and back your way into klov.

 :dunno
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: Robbbert on March 26, 2022, 12:06:43 am
I just visited there, to see what the requirements are. And no, I will NOT be supplying my phone number or address, or joining up with Paypal to make a donation.

Looks like I can cross that forum off my list.

Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: Alpha-tron on March 29, 2022, 08:08:08 pm
Klov is an acquired taste. Not quiet sure why I am there laughs. I got beer stories that I will be happy to share with at zapcon.
Title: Re: KLOV forums hacked, placeholder thread for news and/or survivors
Post by: lilshawn on April 01, 2022, 11:58:48 am
probably password recyclers who had their passwords stolen in some other breach, then used the same credentials on KLOV.

i still get notifications from steam that someone is logging in and I'm getting a 2FA code sent to me.


probably a good idea to run your email address(es) though haveibeenpwned and see how screwed you are.