Mods.dk hacked

[WRAK968]

This morning I received an e-mail from Mods.dk about a hacker who gained access to information on their website. I know there are some users of that site here so I figured I would post the announcement here just in case anyone missed the e-mail:
 

I’m very sorry to inform you that a hacker for about 2 days ago have had success to upload  a script to mods.dk, and run the script. Which information the hacker has stolen is not possible to see at the moment, but the most sensitive information that you have placed on mods.dk is your email address, and password that you are using to access mods.dk. If you have made money donation all information about your credit card/payment method, has been handle by PayPal, and this information is never been transferred to mods.dk.

 

Your password is encrypted in the database, so the hacker cannot read your password direct, but the hacker can try to compare the encrypted password with a password they try, and with a computer they can compare many password in a sort time.

 

So I will recommend you to change your password on mods.dk and if you are using the same password other places also change the password there. Use always different password every places.

 

The hacker have upload a picture and then they have execute the picture and it has create a script they could execute. So by an consequence of this, upload of pictures and files is only allowed when you have been approved. I will approved all existing users that already have uploaded pictures and files, but in case you don’t have permission, then just contact mods.dk.

 

I’m sorry for this trouble but I hope you still want to support my site, this site is only a hobby project just like my amateur radio, and my resourced are limited. If you want all your data deleted form mods.dk you can go to “my account” and said that you want to be deleted.

 

 

Best regards

Erik Hansen

https://www.mods.dk

Note this message in send from a non-monitored mailbox and replies will never been read, so if want in contact then you must go to the homepage.

 

[mbrun]

To be clear, can you confirm that this only affects those that have an account on ‘mods.dk’ and does not represent a security breach of ‘MyGMRS.com’?

 

Thanks in advance.

 

Michael

WRHS965

KE8PLM

 

 

Sent from my iPad using Tapatalk

[WRAK968]

I believe I said this in the very first line,

"This morning I received an e-mail from Mods.dk about a hacker who gained access to information on their website"

 

The only person who can say if there was a hacking attempt here would be Rich the site owner. I have nothing to do with day-to-day operations with MyGMRS and cannot speak on their behalf. This post was simply to alert other users who use the Mods.dk site that their account information there may have been compromised.

 

 

To be clear, can you confirm that this only affects those that have an account on ‘mods.dk’ and does not represent a security breach of ‘MyGMRS.com’?

Thanks in advance.

Michael
WRHS965
KE8PLM


Sent from my iPad using Tapatalk

 

[GuySagi]

Thank you for the alert. Doesn't impact me that I know of, but certainly a nice reminder for us all to be careful.