Report: Steam Forums Down, Possibly Hacked

November 7, 2011 -

The Steam forums are offline, with a message to visitors declaring that they are undergoing maintenance, but some users are telling Eurogamer that the forums may have suffered a security breach. Currently the forums are displaying the following message:

"The Steam Forums are temporarily offline for maintenance," a message on Steampowered reads. "Your patience is appreciated."

Eurogamer received an email from one Steam user who said a group changed the text on the forum and spammed some users' email addresses. The group is reportedly from FknOwned.com, a website that offers video game hacks, porn, etc. The group managed to deface the forums and some users reported receiving emails from Steampowered.com with the following message:

"Ever wanted to dominate the servers you play on with guaranteed results, but you were too afraid to cheat because of ban risks? Visit [removed domain] It's safe, secure and undetected."

"Along with hacks, we've also got some general discussion sections, hacking tutorials and tools, porn, free giveaways and much more. This site has been conditioned to meet all your needs in terms of resources so be sure to take a look and tell us what you think."

"Thanks again, the fkn0wned team."

No one has claimed that user data has been compromised or that any Steam accounts have been breached. Valve has not publicly commented on this story.

Source: Eurogamer

Posted in

Comments

Re: Report: Steam Forums Down, Possibly Hacked

Thankfully the Steam forums use the vBulletin forum software which encrypts account passwords (using md5 with salt) in the database (I know since I've set up vBulletin forums before). This makes it absolutely impossible to decrypt them back into plain text again (the wonders of trap-door cryptography).

 

The hackers could on the hand change people's forum (not Steam) passwords if they broke into the Admin Panel but that wouldn't accomplish anything useful. The worst it seems they've done is collected a huge list of user e-mails to spam and that's about it. Hopefully Valve can just roll back to the latest backup and things will work once again. I guess it depends on how the intruders broke in (phished an admin, found an exploit, etc) which determines how long it will take to prevent future incidents.

 
Forgot your password?
Username :
Password :

Poll

Should 'Hatred' have been removed from Steam Greenlight?:

Shout box

You're not permitted to post shouts.
Matthew WilsonI hope its released to netflix or amazon12/18/2014 - 12:11am
prh99Basically they've given every tin pot dictator and repressive regime a blue print how to conduct censorship abroad. The hecklers veto wins again. At least when it comes to Sony and the four major theater chains.12/17/2014 - 11:55pm
MaskedPixelante"It's not OUR fault that our game doesn't work, it's YOUR fault for having so many friends."12/17/2014 - 9:48pm
Matthew Wilsonapparently tetris did not work because he has a full friends list12/17/2014 - 9:21pm
WonderkarpSo Sony cancelled the release of the Interview. was it ever confirmed that the Sony hacking was done because of that specific movie?12/17/2014 - 8:54pm
MaskedPixelanteWow, Ubisoft went four for four, I didn't think it was actually possible.12/17/2014 - 8:37pm
MechaTama31Oh, ok, I was mixing up "on Greenlight" and "Greenlit".12/17/2014 - 8:23pm
Matthew Wilson@phx you beat me to it. how do you screw up tetris?! my ubisoft this is just stupid. no one should ever preorder a ubisoft game again! ps people should never preorder any game regardles of dev.12/17/2014 - 6:28pm
PHX Corphttp://www.ign.com/videos/2014/12/17/what-the-heck-is-wrong-with-tetris-ps4 I give up on ubisoft12/17/2014 - 6:01pm
MaskedPixelantehttp://comicbook.com/blog/2014/08/16/exclusive-original-unaltered-cut-of-star-wars-trilogy-to-be-rele/ Yeah, this'll never happen.12/17/2014 - 5:03pm
NeenekoThey have and exercise control over which games are allowed on their privately controlled 'open forum'. Their endorsement is fairly minimal since it is only 'we do not reject this', but it is still an endorsement of sorts.12/17/2014 - 3:58pm
NeenekoHistorically there have been issues with libraries allowing some groups but not others. Perhaps 'endorsement' is too strong a word, but their editorial control IS a preapproval process, even if the standards are pretty minimal.12/17/2014 - 3:56pm
E. Zachary KnightLet's put this a different way. My local library allows any group to reserve and use multipurpose rooms. That does not mean that the Library endorses all events that take place in those rooms.12/17/2014 - 12:54pm
E. Zachary KnightValve's editorial control comes from removing problem games and accepting games to Steam. They make no claim over any games otherwise.12/17/2014 - 12:52pm
E. Zachary KnightNeeneko, It is not at all a form of endorsement. Grenlight is an open forum for game developers to pitch their game to Valve/Steam and Steam users. Does Valve have some editorial control? Yes, but not to the point that they preapprove games.12/17/2014 - 12:51pm
Neeneko@EZK - I disagree. Greenlight is built off Valve's brand. While not an explicit endorsement, it is a form of it, otherwise Greenlight would have no value over other platforms.12/17/2014 - 12:05pm
MaskedPixelantehttp://www.latino-review.com/news/exclusive-viola-davis-bags-amanda-waller-role-in-suicide-squad Latino Review says Viola Davis will be Amanda Waller. History of Latino Review says "wait for a REAL news site to confirm".12/17/2014 - 10:48am
PHX Corphttp://www.polygon.com/2014/12/17/7407869/assassins-creed-unity-glitch-broken-problems-xbox-one-patch -Facepalm- Screwup means Assassin's Creed Unity's patch is the 40GB full game on Xbox One12/17/2014 - 10:17am
PHX Corphttp://www.theverge.com/2014/12/16/7401769/the-mpaa-wants-to-strike-at-dns-records-piracy-sopa-leaked-documents Sony leaks reveal Hollywood is trying to break DNS, the backbone of the internet12/17/2014 - 10:05am
E. Zachary KnightA Game being on Greenlight is not an endorsement of said game by Valve, Steam or anyone related to Valve or Steam. Greenlight is a combined sales pitch to Steam and its users.12/17/2014 - 9:51am
 

Be Heard - Contact Your Politician