Report: Steam Forums Down, Possibly Hacked

November 7, 2011 -

The Steam forums are offline, with a message to visitors declaring that they are undergoing maintenance, but some users are telling Eurogamer that the forums may have suffered a security breach. Currently the forums are displaying the following message:

"The Steam Forums are temporarily offline for maintenance," a message on Steampowered reads. "Your patience is appreciated."

Eurogamer received an email from one Steam user who said a group changed the text on the forum and spammed some users' email addresses. The group is reportedly from FknOwned.com, a website that offers video game hacks, porn, etc. The group managed to deface the forums and some users reported receiving emails from Steampowered.com with the following message:

"Ever wanted to dominate the servers you play on with guaranteed results, but you were too afraid to cheat because of ban risks? Visit [removed domain] It's safe, secure and undetected."

"Along with hacks, we've also got some general discussion sections, hacking tutorials and tools, porn, free giveaways and much more. This site has been conditioned to meet all your needs in terms of resources so be sure to take a look and tell us what you think."

"Thanks again, the fkn0wned team."

No one has claimed that user data has been compromised or that any Steam accounts have been breached. Valve has not publicly commented on this story.

Source: Eurogamer

Posted in

Comments

Re: Report: Steam Forums Down, Possibly Hacked

Thankfully the Steam forums use the vBulletin forum software which encrypts account passwords (using md5 with salt) in the database (I know since I've set up vBulletin forums before). This makes it absolutely impossible to decrypt them back into plain text again (the wonders of trap-door cryptography).

 

The hackers could on the hand change people's forum (not Steam) passwords if they broke into the Admin Panel but that wouldn't accomplish anything useful. The worst it seems they've done is collected a huge list of user e-mails to spam and that's about it. Hopefully Valve can just roll back to the latest backup and things will work once again. I guess it depends on how the intruders broke in (phished an admin, found an exploit, etc) which determines how long it will take to prevent future incidents.

Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
MechaTama31Infophile: Kind of like how you're criticizing these theoretical reactions before you've even read any? ;)09/01/2015 - 12:44am
PHX CorpI'll probaly Start the stream around 8PM Eastern08/31/2015 - 10:09pm
PHX CorpOk, see you guys Tomorrow on the GP Facebook Page, I'll be steaming either the first 2 megaman games(Through Megaman Legacy Collection) or Rare Replay as the first game on My twitch.tv page tomorrow While we wait for GP to Come back up later this week08/31/2015 - 10:01pm
james_fudgeAlso check out our Facebook page and chat there! https://www.facebook.com/gamepolitics08/31/2015 - 9:53pm
james_fudgeSee you all on the other side! Find me on Twitter :)08/31/2015 - 9:51pm
james_fudgeAllright, i'll mention this on the GP facebook page08/31/2015 - 9:49pm
PHX Corpand now it's ready to go for everyone08/31/2015 - 9:35pm
PHX Corpok, done http://www.twitch.tv/trustygemtwitch I have to put on one more finishing touch and it is ready to go08/31/2015 - 9:19pm
Andrew EisenFeel free to leave us suggestions on Facebook or Twitter too. We're going to be busy but we'll try our best to keep an eye on 'em.08/31/2015 - 8:59pm
Andrew EisenIt's an interesting idea though. If we do anything, we probably won't know until after the site goes offline so keep an eye on GP social media for announcements.08/31/2015 - 8:59pm
Andrew EisenYeah, we could use my Twitch chat box too. There's always IRC but we don't currently have a GamePolitics channel.08/31/2015 - 8:57pm
Goth_SkunkThough I think the limit is 9 at a time in the hangout, so anyone who can't get in would be stuck out in the 'on air' portion.08/31/2015 - 8:57pm
Andrew EisenFor the show, I'd like the chat open to anyone who wants to watch.08/31/2015 - 8:55pm
PHX CorpI could Set Up a Temporary chatroom on My twitch.TV page while GP is busy updating the site(since I'll be Fighting Megaman Legacy Collection on Xbox one)08/31/2015 - 8:54pm
Goth_SkunkI don't see a problem with inviting viewers. It's not like I'm advocating this to be an open forum, just something specific to GP members.08/31/2015 - 8:53pm
Andrew EisenThat's why I embed the chat box from my Twitch Page. Can't get chat on the YouTube page to work either.08/31/2015 - 8:49pm
Andrew EisenI do but I haven't seen a way to incorporate viewers to chat without specifically inviting them to the event.08/31/2015 - 8:49pm
Goth_SkunkThough I'm surprised you'd not be familiar with this, Andrew. Do you not use Google Hangouts when you do S.P.A.C.?08/31/2015 - 8:45pm
Andrew EisenGP Movie Night!08/31/2015 - 8:41pm
Big PermEveyone should be too busy with phantom pain to notice GP is down. Hail Vidya!08/31/2015 - 8:40pm

Be Heard - Contact Your Politician