0 Members and 1 Guest are viewing this topic.
Approximately one hour ago (1 PM EST), an attack was launched against myBittorrent.com. The individual - or individuals - responsible for the attack emptied the SQL databases, which contained all the indexed torrents. However this may be the least of myBittorrent's problems, as all the user accounts were wiped out as well.According to myBittorrent's administration, the exact details and method of the attack are slowly becoming apparent. Before a backup installation of the indexed torrents can even be attempted, the security hole must first be patched. Even when the hole is patched and the torrents are restored, unfortunately there is no backup for the approximately 225,000 registered users accounts. This information is either compromised or lost forever; however, myBittorrent has informed Slyck.com there is no way to link users to the torrents they've downloaded.myBittorrent's hosting company, in addition to the site's administration, are currently investigating the source of the attack. Currently, the attacker is attempting to break into the host company's other servers by "hopping" from myBittorrent's server. However, they appear contained. The attack originated from a Dutch proxy, and those responsible may have known or guessed the password."We know for sure that the SQL server AND the Download server have been compromised," a myBittorrent administrator told Slyck.com. "All data is recoverable, except for help tickets sent in the last 24 hours AND the user accounts."Additionally, the myBittorrent administration tells Slyck.com that proxies have been pounding their servers for the last week. The effort was likely part of a brute force attack, where all conceivable password combinations were used to obtain access to the server. Indeed, those responsible for the attack changed the password once they successfully breached the main gates.Update:It has also been conveyed to Slyck.com those responsible were running a script for 9 days in an effort to obtain the password. Before today's attack, those responsible may have been inside the server for up to a day. Also, the attackers rigged the server, which would cause the Linux OS to self destruct if it was shut down. Nothing short of completely wiping out the server and restarting will rid myBittorrent.com of the attack.It may be some time before the site is restored, however the most devastating loss will be the user accounts. Yet these too are recoverable in a sense, as myBittorrent.com's strong following should see these numbers eventually replenished in the near future.
