Report: Steam Forums Down, Possibly Hacked

November 7, 2011 -

The Steam forums are offline, with a message to visitors declaring that they are undergoing maintenance, but some users are telling Eurogamer that the forums may have suffered a security breach. Currently the forums are displaying the following message:

"The Steam Forums are temporarily offline for maintenance," a message on Steampowered reads. "Your patience is appreciated."

Eurogamer received an email from one Steam user who said a group changed the text on the forum and spammed some users' email addresses. The group is reportedly from FknOwned.com, a website that offers video game hacks, porn, etc. The group managed to deface the forums and some users reported receiving emails from Steampowered.com with the following message:

"Ever wanted to dominate the servers you play on with guaranteed results, but you were too afraid to cheat because of ban risks? Visit [removed domain] It's safe, secure and undetected."

"Along with hacks, we've also got some general discussion sections, hacking tutorials and tools, porn, free giveaways and much more. This site has been conditioned to meet all your needs in terms of resources so be sure to take a look and tell us what you think."

"Thanks again, the fkn0wned team."

No one has claimed that user data has been compromised or that any Steam accounts have been breached. Valve has not publicly commented on this story.

Source: Eurogamer

Posted in

Comments

Re: Report: Steam Forums Down, Possibly Hacked

Thankfully the Steam forums use the vBulletin forum software which encrypts account passwords (using md5 with salt) in the database (I know since I've set up vBulletin forums before). This makes it absolutely impossible to decrypt them back into plain text again (the wonders of trap-door cryptography).

 

The hackers could on the hand change people's forum (not Steam) passwords if they broke into the Admin Panel but that wouldn't accomplish anything useful. The worst it seems they've done is collected a huge list of user e-mails to spam and that's about it. Hopefully Valve can just roll back to the latest backup and things will work once again. I guess it depends on how the intruders broke in (phished an admin, found an exploit, etc) which determines how long it will take to prevent future incidents.

 
Forgot your password?
Username :
Password :

Poll

Who's responsible for crappy Netflix performance on Verizon?:

Shout box

You're not permitted to post shouts.
Matthew Wilson@pm I doubt it. Google seems to be distancing themselves from G+07/25/2014 - 9:31pm
Papa MidnightGoogle+ Integration is coming to Twitch!07/25/2014 - 8:41pm
MaskedPixelanteThis whole Twitch thing just reeks of Google saying "You thought you could get away from us and our policies. That's adorable."07/25/2014 - 2:52pm
Sleaker@james_fudge - hopefully that's the case, but I wont hold my breath for it to happen.07/25/2014 - 1:08pm
SleakerUpdate on crytek situation is a bit ambiguous, but I'm glad they finally said something: http://www.gamesindustry.biz/articles/2014-07-25-crytek-addresses-financial-situation07/25/2014 - 1:07pm
E. Zachary KnightMan Atlas, Why do you not want me to have any money? Why? http://www.atlus.com/tears2/07/25/2014 - 12:06pm
Matthew WilsonI agree with that07/25/2014 - 10:45am
james_fudgeI think Twitch will have more of an impact on how YouTube/Google Plus work than the other way around.07/25/2014 - 10:22am
IanCWelp, twitch is going to suck now. Thanks google.07/25/2014 - 6:30am
Sleaker@MP - Looked up hitbox, thanks.07/24/2014 - 9:40pm
Matthew WilsonI agree, but to me given other known alternatives google seems to the the best option.07/24/2014 - 6:30pm
Andrew EisenTo be clear, I have no problem with Google buying it, I'm just concerned it will make a slew of objectively, quantifiably bad changes to Twitch just as it's done with YouTube over the years.07/24/2014 - 6:28pm
Matthew WilsonI doubt yahoo has the resources to pull it off, and I not just talking about money.07/24/2014 - 6:15pm
SleakerI wouldn't have minded a Yahoo purchase, probably would have been a better deal than Tumblr seeing as they paid the same for it...07/24/2014 - 6:13pm
MaskedPixelanteIt's the golden age of Hitbox, I guess.07/24/2014 - 6:08pm
Matthew Wilsonagain twitch was going to get bought. It was just who was going to buy it . Twitch was not even being able to handle the demand, so hey needed a company with allot of infrastructure to help them. I can understand why you would not want Google to buy it .07/24/2014 - 5:49pm
Andrew Eisen"Google is better than MS or Amazon" Wow. Google, as I mentioned earlier, progressively makes almost everything worse and yet there are still two lesser options. Again, wow!07/24/2014 - 5:43pm
Andrew EisenI don't know. MS, in my experience, is about 50/50 on its products. It's either fine or it's unusable crap. Amazon, well... I've never had a problem buying anything from them but I don't use any of their products or services so I couldn't really say.07/24/2014 - 5:42pm
Matthew WilsonGoogle is better than MS or Amazon.07/24/2014 - 5:33pm
Sleaker@AE - I've never seen youtube as a great portal to interact with people from a comment perspective. like ever. The whole interface doesn't really promote that.07/24/2014 - 5:28pm
 

Be Heard - Contact Your Politician