Gamigo hacked - accounts compromised/deactivated?

[isgandarli]

There was an attack on the gamigo database in which user information, such as alias usernames and encrypted passwords were stolen.

md5(md5($pass).$salt)


Encrypted.......

[Seher]

Forum passwords are clearly plain text. My password is in the list. :P

[Phlue4]

Originally Posted by Seher

Forum passwords are clearly plain text. My password is in the list. :P

I dont quite get it, what list are you talking of?

[Seher]

The list that got published with all forum accounts and their passwords. No, I won't spread the link if you bother me via PM. (Already received like 3)

[TheMessenger]

Originally Posted by Phlue4

I dont quite get it, what list are you talking of?

Gamigo claimed they encrypted all passwords. But they didn't because I and several people have seen the dump of users/passwords and they are definitely not encrypted...at all.

[_Emin_]

https://de.gamigo.com/showlayer/resetpassword

It's not working for me.. it says '' you're not able to change your password at the moment''

[Kitsuni]

NGD, if you value your customers stop whatever you are doing right now and do a double check that this won't happen to Horus or RA.

You still use account names for the forum which is a big no-no.

Require everyone to make a mandatory forum name change as soon as possible. vBulletin or not, everything gets hacked in time.
(And forums are the #1 hacked thing on the Internet, as any veteran website owner knows.)

And most importantly... stop relying on MD5s for a password scheme, they have been insecure for some years now., even when salted.

I feel for anyone who has invested money into Gamigo servers and hope that nothing bad will come of this.

[Phlue4]

Originally Posted by Phlue4

(...)because Gamigo is a bunch of incompetent banterers that seem not to care about Regnum Online anymore.

Besides that, they don't care about Regnum, don't keep a single promise of theirs...
German community needs a new publisher!

[Ilakagina]

At least their account system seems to work again and you have to change the resetted password following this instructions:

http://forum.gamigo.com/showthread.p...ter!&p=1#post1 (german)

http://forum.gamigo.com/showthread.p...rds!&p=2#post2 (english)

however their server is currently overloaded because all the players from their 20 or more games are trying to change their pw now so it is normal to get timeouts - it took me around 5 tries over 2 hours to log into the account system, now it hangs at the passward change procedure for Regnum.
I'll try tomorrow morning again

[v0rt3x]

The version of the hacked Gamigo forum was:

Powered by vBulletin® Version 3.8.7

and this forum here is:

Powered by vBulletin® Version 3.8.2

So this version is older than the hacked Gamgio forum.

I hope, that this forum here is secure and not so easy to hack as the Gamigo forum was.

The new Gamigo forum is:

Powered by vBulletin® Version 4.1.10

Plz NGD, check this quickly!