SpecialAttack.net
https://forum.specialattack.net/

+/- 1000 MC accounts and passwords leaked
https://forum.specialattack.net/viewtopic.php?t=9879		 Page 1 of 1
Author:  Echo419NL [ 15 Mar 2011, 16:45 ]
Post subject:  +/- 1000 MC accounts and passwords leaked
Guess what. Apparently somewhere around a 1000 Minecraft accounts and passwords have leaked thanks to a client modification of some sort. I don't know the full details, but they say there were client mods that promised stuff like flying, but meanwhile sended your information to the creators (giving them free access to your name).

Article:
http://forums.mcbans.com/index.php/topic,186.0.html

And mentioned on the "official" forum:
http://www.minecraftforum.net/viewtopic ... 0&t=222953

Check if you are one of the leaked accounts:
http://dinnerbone.com/minecraft.php

If you want to be safe, I suggest changing your password.

If you are op+ it is compulsory to change your passwords.
^ (Ollieboy added this)
Author:  Sanjar Khan [ 15 Mar 2011, 16:56 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
If you dl'd a client mod just to fly you'd be a bit clueless.
Author:  Echo419NL [ 15 Mar 2011, 17:09 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Some might find it too much of a hassle to register at the official WoM forums and go download a client somewhere else. It's clueless, but still, it won't hurt to send out a warning.
Author:  [SpA]Ivanosauros [ 16 Mar 2011, 06:34 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Was just about to post this, then saw you did.

Thanks.
Author:  prototypedesign [ 16 Mar 2011, 06:57 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I checked a few people from SpA, and found nobody on the list. No guarantees nobody's on, but several of our players are clean.
Author:  Ollieboy [ 16 Mar 2011, 06:59 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I'd go ahead and change your passwords anyway. Mine wasn't on the list but I don't REALLY wanna trust a website to tell me that.

If you are op+ it is compulsory to change your passwords.
Author:  Planitia [ 16 Mar 2011, 08:20 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I am going to ban luketainsh from all of our servers. He has access to such a list. He has been banned on several servers for the same thing. He is a vet on here atm if anyone objects unban him.
Author:  intertoothh [ 16 Mar 2011, 09:17 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Not on the list, but changed pass
Author:  Xesdra [ 16 Mar 2011, 10:12 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Since when is it compulsory to change passes?
Author:  SnowfireX [ 16 Mar 2011, 10:36 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Iunno, since this happened?
Changed my pass though, just for good measure.
Author:  Ollieboy [ 16 Mar 2011, 10:50 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Xesdra wrote:
Since when is it compulsory to change passes?
Since I made it compulsory to change passwords because you have moderation powers on the servers. Whether you're on that list given by that website or not, it is still a preservation of the server's interests.
Author:  Sanjar Khan [ 16 Mar 2011, 12:17 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
What if I know for a fact I did not download anything except WoM, from worldofminecraft.net.
Author:  Planitia [ 16 Mar 2011, 12:50 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Sanjar Khan wrote:
What if I know for a fact I did not download anything except WoM, from worldofminecraft.net.
If you ONLY use WoM and NEVER EVER put your password somewhere else then you should be safe. This was mainly a SMP security issue where a TINY LITTLE DINOSAUR ARMS posted a fake flymod and harvested passwords. A password like ifhGdeuHHB646#%#bfeh wuold take tens of thousands of years to brtueforce so thats a sure bet though these password were phished. No ammount of complicated shit will protect you from that.

A few good tips that i employ are.

a) If a server has a stay logged in feature, use it. It help you identify a fake website since you won't be logged in. And if your aren't then check the URL.

b) Don't try to hack SMP. If you do chances are you will be entering your password into a key logger. Also if you make an account on third party minecraft related websites use a completely different password. Alot if accounts are stolen when those databases are leaked or sold. Curse.com is a good example.

c) If you use autofill on your browser, occasionally reset the saved passwords and resave only trusted ones. This will prevent the autofill from being a TINY LITTLE DINOSAUR ARMS and posting your passwords publicly somewhere they were meant to go.
Author:  Fumino [ 17 Mar 2011, 06:59 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
The well known griefing team they mention, but don't name is Team Avolition, who are at war with Reddit SMP servers.
http://www.youtube.com/user/teamavolition

They are also able to hack mcbans and ban whoever they want as well, good thing we don't use that.

I wasn't on the list, but I changed my password as well.
Author:  Planitia [ 17 Mar 2011, 08:11 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
O.O i almost installed mcbans on our server... Orcs server uses it so perhaps it might be a good idea to stay clear of them for a bit. Until this all quietens down a bit.
Author:  [SpA]JuncoPartner [ 17 Mar 2011, 14:20 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Fumino wrote:
The well known griefing team they mention, but don't name is Team Avolition, who are at war with Reddit SMP servers.
http://www.youtube.com/user/teamavolition

They are also able to hack mcbans and ban whoever they want as well, good thing we don't use that.

I wasn't on the list, but I changed my password as well.
Mann, hopfully with /bb , along with mcbans (when it gets its shit together) little clubs like this fill fade away, or have very little impact. Really something like mcbans should be something that would put a quick end to grief teams, not assist them :roll:
Author:  Fehzor [ 17 Mar 2011, 14:38 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I reset my password too... though I wasn't on the list.
Author:  Smokeybacon [ 17 Mar 2011, 15:27 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Willdo as soon as I get home.
Author:  [SpA]Dolf [ 18 Mar 2011, 11:14 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I automatically went to change my password when I read the topic's title on Wednesday, didn't read the text though. Now I did read it + the comments, and since many people on the servers never visit the forums, I think we should inform everyone on the servers... Somehow. If there has been a breach in the moderating circle, I will not take it lightly... This means Vet+.

+ the right to kick should be taken away from Members, since so many seem to abuse it (not directly abusing, but kicking with questionable reasons).
Author:  prototypedesign [ 18 Mar 2011, 15:40 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I changed my password to a new, hyper-super secure one. protorules
Author:  dankirk [ 18 Mar 2011, 21:45 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Mkay added a feature on my bot that automatically uses that website to check if any joining player is on the list and warns them if they are.
Author:  xpmode [ 18 Mar 2011, 22:05 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I'm not in the list but changed my pass too.

500 MORE ACCOUNTS STOLEN!

And is luketainsh is a ... hacker?!? :shock:
Author:  Luketainsh [ 19 Mar 2011, 07:59 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
I didnt hack them myself, it was passed on from someone i know who plays another server, his friend hacked them, i have no clue how though..
Author:  Fabioli [ 22 Mar 2011, 08:01 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
A Flying Client is collecting passwords? Please tell me you are not talking about WoM?!!
Author:  Ollieboy [ 22 Mar 2011, 08:37 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Not at all, WoM has more than 1000 users :P
Author:  xSupremeDylan [ 25 Mar 2011, 00:55 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
yay im safe on all three accounts
Author:  prototypedesign [ 25 Mar 2011, 01:55 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
It's not like they hacked into databases or anything, they just built their own malicious client that sent your login to Notch and themselves.
Author:  [SpA]JuncoPartner [ 25 Mar 2011, 04:28 ]
Post subject:  Re: +/- 1000 MC accounts and passwords leaked
Really people should do a few password changes for all their valued accounts, whether it's your minecraft or school/college login, it's a good habbit to make, especially for me back at school when people would try and see what you were putting in for your password.

There's that and phishing sites, like a well disguised steam one got the better of me before. I use a program called Rapport, gives me a heads up when somethings trying to see the password I'm putting in, not sure how that work though.
Page 1 of 1 All times are UTC+02:00

Powered by phpBB® Forum Software © phpBB Limited