Post
Topic
Board Meta
Re: Info about the recent attack
by
SolarSilver
on 12/09/2011, 17:58:22 UTC

Passwords

It is not known for sure that the attacker copied any password hashes, but it should be assumed that he did.


Well, I'm already getting spam on my unique email address generated for the forum so we might consider that if that leaked, the hashes leaked as well:

Code:
Received: by 10.42.220.135 with SMTP id hy7cs191738icb;
        Mon, 12 Sep 2011 05:57:14 -0700 (PDT)
Received: by 10.14.13.14 with SMTP id a14mr1481921eea.41.1315832233374;
        Mon, 12 Sep 2011 05:57:13 -0700 (PDT)
Return-Path:
Received: from x
        by mx.google.com with ESMTPS id 36si4325308eeh.202.2011.09.12.05.57.12
        (version=TLSv1/SSLv3 cipher=OTHER);
        Mon, 12 Sep 2011 05:57:13 -0700 (PDT)
Received-SPF: fail (google.com: domain of no_reply@libertyreserve.com does not designate Y as permitted sender) client-ip=Y;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of no_reply@libertyreserve.com does not designate Y as permitted sender) smtp.mail=no_reply@libertyreserve.com
Received: from yama-bousai-web.bosai.vill.yamato.lg.jp ([61.194.116.165])
by X (8.14.1/8.14.1) with ESMTP id p8CCvAWf028904
for ; Mon, 12 Sep 2011 14:57:11 +0200 (CEST)
Message-Id: <201109121257.p8CCvAWf028904@X>
Received: from User ([66.219.29.150])
          by yama-bousai-web.bosai.vill.yamato.lg.jp
          (Post.Office MTA v4.1.0.4 release 20090417
           ID# 6014-053U50L50S0V41J) with ESMTP id jp;
          Mon, 12 Sep 2011 19:48:48 +0900
From: "no_reply@libertyreserve.com"
Subject: Liberty Reserve Bonus Winner
Date: Mon, 12 Sep 2011 19:48:28 +0900
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-9"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000











 



 border="0" cellpadding="0" cellspacing="0">
 
   




       
         
         
       
       
         
       
     

 
20% Bonus Winner
 src="" width="1">

       border="0">
       

         
         
       
     
    CONGRATULATIONS!

            You have won a the chance to WIN 20% Bonus of your Liberty Reserve account balance. One time - Limited BONUS Offer! You can earn 0.5usd (Balance: 10usd) or up to 500usd (Balance: 10.000usd) depending on your account balance. This BONUS Form must be completed in maximum 5 days using the link below or you will not qualify for the 20% Bonus. Please be aware that if your account balance is 10usd your bonus will be 0(zero) and you will not qualify for the instant Free Bonus. You can use one of our authorized exchangers listed on www.libertyreserve.com website and upload money secure in your account.
           

                 

           
         
 width="5">

     
       
         
       
       
         
         
       
       
         
       
     
 src="" width="1">
How can I get my Bonus?
 src="" width="1">

       border="0">
       

         
         
       
     


                  Click "GET BONUS!" text below and complete the Bonus Request Form
  on our website
and find your bonus using your current balance:

     






   GET BONUS!   



           

 width="5">

     
       
         
       
     
 src="" width="1">

       border="0">
       
         


         
         
       
     
 

     
 
To increase your bonus you can use one of our autorized exchangers to upload money in your account! Please be aware that this Bonus Offer will expire in 5 bussiness days! Bonus amount will be added to your account balance in maximum 24 hours!

     

    2002 � 2011  Liberty Reserve S.A. All rights reserved.

         

           
 width="5">


         
 
 



 

 
   
 src="" width="1">
 src="" width="1">