منتديات phpBBArabia

????? ????? كتب:????? ???? ?????? ????? ?? ????? ?? ??? ???? ?????? ????? ????? ???? ????? ??????? ???? ???

Update #3 17-12-2014 - 01:10

At this time we are proceeding with recovery efforts and have some additional important information.

We have confirmed that initial entry was made via a team member's compromised login details and not as the result of a vulnerability in the phpBB software. The phpBB download packages were never altered.

The attackers were able to obtain access to the phpBB.com and area51 databases, meaning that user information, including hashed salted passwords, was compromised. Additionally, all logins on area51 between Dec. 12th and Dec. 15th were logged in plaintext. While the hashing algorithm utilized in phpBB will make it difficult to obtain those passwords, you should not take any chances. If you were using your phpBB.com or area51 passwords anywhere else, you must change them.

We will provide full details, including the steps we have taken since the compromise, once we are back in operation.

Update #4 22-12-2014 - 08:45

We have concluded our investigation and are actively working on bringing services back online.

We verified the integrity of all data on the machines, which took a considerable amount of work and time. The backend infrastructure has likewise been improved so things should be running better than ever.

Apologies for the long downtime. We expect this to be completed within 24-48 hours.