CAA: Christian Anime Alliance

Ok, I have no idea what's going on. I think it started yesterday, but anime angels has been hacked, I think. When you go to the website (Animeangels.net), it goes to this wierd site... Anyone have any idea what's going on? I'm hoping that some of the mods that do AA will see this and tell me what's happening.

Well, sorry if someone already posted something like this somewhere else on this site... I'm too lazy to look.

Any help would be appreciated!

Eggroll

Uh...apparently it tries to run some kind of Java applet. o.o

Yup, it's been hacked. I wouldn't go there -- I can't really confirm it, but it might be a ByteVerify-based worm. I'll sticky this temporarily to warn people.

This is a known hacker. They've been hit by a Turkish hacker who goes by the handle "iskorpitx". His known and typical targets are sites running PHP Nuke. NukeCops has a forum under "Security" for help with patching hacks.

I hope Anime Angels had a backup - especially if it was their PHP he attacked, as is typical MO, they'll need to patch it and possibly lose some information in the process.

Ouch, that is a real shame. Thanks for the heads up.

Man, I'll admit, AA is my life. ^_^;

well, more like, the rpgs are my life. ^_^;

Well, you're welcome to hang out with us for awhile. ^^

uhh what's Anime Angles? (Kiba doesn't know a thing since he lives here and at work....and school i suppose)

It's another Christian forum site.

It is our sister site. They produce an anime magazine I believe.

*Points to link at top of page that you should not click on*

Yeah, they come out with a manga-zine every now and then. I've only seen one issue, and that's actually how I found out about it.

^^ Kiba knows sooo little about looking at the top of an Internet page

Kiba-kun wrote:^^ Kiba knows sooo little about looking at the top of an Internet page

it's all about that stuff going on in the center really

This is kinda on topic, but... does CAA have an off-site backup, and if so how often does it update?

It does, and for security reasons that's all we'll reveal about it.

I did throw a PM to Keely and Ann but I haven't heard from them. Draw2Much did respond to my email so I know someone's looking into it.

I'm not too sure what website we get directed to but I'm not waiting for it to upload (didn't look too friendly). It's not like I wanted to see some distasteful image anyway.

Pls forgive me for using this thread to grumble at MelodyMaker. MM, I can't believe you switched off your PM option! Brother, how am I supposed to alert you about stuff like this now?

The blank white screen that looks like a Java Applet that initially comes up is a HUGE swf (shockwave flash) file that's a signature of that particular hacker. It's primary purpose is to crash your system with its load time and tick you off.

The site that it redirects to is remotely hosted on a server in Denmark. I didn't bother to wait for it to load, because the source code told me it was more of the same garbage, and I was tired of it crashing my browser just to figure out who the punk was.

L4m3|2z these days...decent |-|aXX0rz used to at least leave a threat or a reason for their hack in the source code. (I know, I was one, too many moons ago. Then idiots like this guy started invading the scene, and I gave it up to help patch hacked sites and work at hacker prevention.)

Anyway, yeah - I would really just advise against clicking the link to AA until the site is fixed and hack-proofed for future use. (This guy is the type who will be back if he discovers the site was restored but not patched against future attacks.) What a pain in the butt.

Thanx 4 alerting the mods of AA, Mave. ^_^ I wasn't sure who does CAA, and I'm (as I said before) too lazy to look....

Thankies everybody who know's (at least sort of) what's going on!!!!!!!!!!! ^-^

I know this is totally random, but this thread is now a sticky!!!! XD

none of the thread I've started have ever become stickies....

*walks off into lalaland*

Perhaps the link should be disabled until the problem is fixed?

Mave wrote:Pls forgive me for using this thread to grumble at MelodyMaker. MM, I can't believe you switched off your PM option! Brother, how am I supposed to alert you about stuff like this now?

See my incoming PM, Mave... ;__; (Yes, I've switched it back on.)

Sorry for not replying to this thread sooner; I had to temporarily leave CAA for a little while -- but I am aware of what's happened at Anime Angels and can only hope and pray that Keely can get it up and running again soon. -_-;

That explains everything then.I was wondering why every time I tried to get on AA the last couple days all I got was a blank black page.Must be fortunate that it didn't load on my computer 'cause that's all I got..a blnk black page.

I just found out what's going on:

http://www.christiananime.net/showthread.php?t=5465

keely explains all! ^_^

That thread is from 2004. It was from a different occasion.

o. -_-

oops. I never pay attention to dates. ^_^;

Egads, I'm out of loop and just found out about this as I've been on a break from both CAA and AA. I'll pop more e-mails to the admins and hope the problem goes away soon. Any prayer is appreciated!

eggroll wrote:I just found out what's going on:

http://www.christiananime.net/showthread.php?t=5465

keely explains all! ^_^

That thread is, like two years old - so I'm pretty sure that isn't it.

I hope you all get back on your feet soon.

uhm... just another question... why is this stickied? Doesn't that just give the hacker more attention and "glory"?

Slater wrote:uhm... just another question... why is this stickied? Doesn't that just give the hacker more attention and "glory"?

A)

Yup, it's been hacked. I wouldn't go there -- I can't really confirm it, but it might be a ByteVerify-based worm. I'll sticky this temporarily to warn people.

B) To inform members who were confused about what had happened to the site. AA and CAA have, in my experience, always looked out for the other's members during down time or hacker incidents like this one. It's just a courtesy.

To make a long story short, Keely's been a little busy -- but for now, although the site's still non-operational, at least it's safe to click the link to it.