PDA

View Full Version : VBulletin software exploit - Dodgy P.M. with virus link



heavychevy
15-08-2008, 06:41 PM
Recieved a P.M. from a Street Commodores member this morning.

Haven't been on that site for years and figured it may have been a 'login or you will be deleted' type message.

P.M. contained a Porn Tube Website image and as I rolled over it, I could see the links and they looked dodgy. I deleted it.

Checked their forum and they've been hit with a VBulletin software exploit whereby the person that sent the virus P.M. was not actually the sender.

Essentially everyone on that site will be sent the virus P.M., each time from a different member / sender

Plenty have fallen for it thinking it was a P.M. from a "member" they knew.

Seems they have been compromised by a flaw within VBulletins security which allows this to take place.

Googling suggests that many VBulletin Forums have been affected in the last couple of weeks. I'm guessing most good virus software on the users P.C. would pick up the threat.

No doubt Sidey is on top of things.

maginoodle
15-08-2008, 07:02 PM
i got that pm aswell. i clicked the link and then just closed the new window when i saw what it was

PBoB
15-08-2008, 07:15 PM
Got it too, deleted it.

BadSeed
15-08-2008, 07:20 PM
deleted it

vx_clubby
15-08-2008, 07:37 PM
Got it too, so obvious it was a virus haha
some people must get bored

Ryzz
15-08-2008, 08:18 PM
Did anyone receive it on LS1 or only on other Forums? I don't know if there is a fix out from VB yet but Jase is usually on top of these things pretty quickly.

BennyMac
15-08-2008, 08:29 PM
Yeah anyone knows its YOUPORN not PORNTUBE.........I mean, deleted it.

Ben :)
NOW THATS WHAT I CALL A STICKY SITUATION

German Statesman
15-08-2008, 08:59 PM
Did anyone receive it on LS1 or only on other Forums? I don't know if there is a fix out from VB yet but Jase is usually on top of these things pretty quickly.

Bimmerforums.com got hit a couple of weeks ago....same thing, a PM from a poster with a porn link (disabled in my case)

Mungrel
15-08-2008, 09:31 PM
deleted it too...

Chappie
17-08-2008, 01:03 PM
Yep i just logged on (after 3 months!!)after reading this thread and sure enough it was in my P.Ms !! deleted it after seeing the Porn tube ad and the dodgy link it gives you when you scroll the cursor over the link!!! Hope we dont get hit with it here!!

Can the Mods please keep us updated with this current threat and any info on the virus it downloads when the link is activated. It would be good to google the virus or trojan and see exactly what it is and its effects.