A Gentle Reminder - From Wiz

WizGizmo

WizGizmo

Mod-On-Hiatus
Mod-On-Hiatus
Joined
Mar 28, 2008
Messages
4,476
Reaction score
57,707
Hey B-Hatters:

As many of you are aware, some BHW members have recently
had their accounts hacked and people have gained access to
the forum and posted virus-ridden "shares" under those individuals'
names, causing them to be banned as a result.

The best advice I can offer is to do the following:

1) Change your password often

2) Make sure that your password has a good large
mix of upper and lower case letters and mixed numbers.

Example: A password like "sdUu1qI7bJFJ8ahS52NG" is much
harder to crack than something shorter like "marketer2010".

This has been a BHW Public Service Announcement.

Thanks to rudeprincess for suggesting it :thanks:

Cheers! - "Wiz"

PS: And make sure your anti-virus and anti-spyware programs
are kept up-to-date and always have them running.
 
Last edited:
Advertise on BHW
Guys I recommend you download a piece of software called "KeyScrambler" What it does is that it encrypts and alters all you keystrokes at the top level, so if someone has a keylogger installed on your pc and is trying to sniff out your info your keystrokes will appear to be a jumble of letters and numbers to them.
 
A password like 'sdUu1qI7bJFJ8ahS52NG' is basically impossible to crack, as vB locks an account for 15 minutes after five incorrect logins (an average of 3 minutes per attempt). Thus, bruteforcing a password containing six numbers (such as 99999) would take 3*99999 minutes. You're pretty much safe unless you download something. Not sure if it's by account or IP though.
 
tbootz said:
Guys I recommend you download a piece of software called "KeyScrambler" What it does is that it encrypts and alters all you keystrokes at the top level, so if someone has a keylogger installed on your pc and is trying to sniff out your info your keystrokes will appear to be a jumble of letters and numbers to them.
Click to expand...
If I could add to that? A lot of passwords are stolen via browser cache's, Clear your cookies don't let your browser remember your passwords.
 
M.A.D said:
Yet another program?
Wouldn't it just be easier to use the on-screen keyboard. (if you use windows off-course)
Go to start menu | all programs | accessories | ease of access | on-screen-keyboard.
You can't log keys, you're not stroking.
Click to expand...

Easier, yes. More secure...not necessarily:

http://en.wikipedia.org/wiki/Keystroke_logging#On-screen_keyboards

FTA:

It is sometimes said that a third-party (or first party) on-screen keyboard program is a good way to combat keyloggers, as it only requires clicks of the mouse. However, this is not always true.
Most on screen keyboards (such as the onscreen keyboard that comes with Microsoft Windows XP) send keyboard event messages to the external target program to type text. Every software keylogger can log these typed characters sent from one program to another. Additionally, some programs also record or take snapshots of what is displayed on the screen (periodically, and/or upon each mouse click).
Click to expand...
 
M.A.D said:
Yet another program?
Wouldn't it just be easier to use the on-screen keyboard. (if you use windows off-course)
Go to start menu | all programs | accessories | ease of access | on-screen-keyboard.
You can't log keys, you're not stroking.
Click to expand...

Yeah it'd be easier and time consuming as hell....
Not to mention hackers can still easily take a snapshot of your screen.
 
Thanks Wiz for the quick replay. I just thought it would be a good idea for everyone to change their passwords because it seems that the setup.exe is being uploaded by a lot of members who have been here for awhile. I am sure they are a victim but they are getting banned anyway. Hopefully , everyone who reads this today will immediately change their passwords.
 
KeyScrambler is a must addon for firefox !

Here is the official download link

Code: 
https://addons.mozilla.org/en-US/firefox/addon/3383
 
Vbulletin also has the feature for admins to force users to change their passwords ever so often. Perhaps that is needed.
 
Thanks for the PSA WIZ. I think most around here tend to lax on the scrutiny of a download when it comes from a trusted member we have seen often.

Thanks for the tip on keylogger tbootz, I'm definitely going to check that out.

I recommend using lastpass plugin on Firefox. It has an auto generate password feature (hit alt-G).
Check all 4 boxs one for A-Z, a-z, numbers, & one for symbols. Then change characters to 10, and then change min. numbers to 2. Gives you passwords like the ones suggested above. I really like this plugin.
**I forgot to add, like the name suggests, you can have one password that allows you to access all your passwords. Be sure to clear cach like OXON suggested, LSO cookies as well.

Anyone have any advice on anti-spyware/adware I can run like in a "boot time scan" fashion? Like for example I run Avast free home and it has a boot time scan feature that allows you to shut down windows and scan for viruses while your OS is not running.
Anyone?

Thanks again for the PSA. :D

KBC
 
Last edited:
In all honesty I don't think these "hackers" are simply sitting are their computers guessing passwords all day so the actual password you have, no matter how complex it is, shouldn't really matter (unless I'm missing something). They have probably uploaded a dirty file with a keylogger, got some accounts, and continued the chain.

So in that case, the KeyScrambler is a great idea.
 
rudeprincess said:
Thanks Wiz for the quick replay. I just thought it would be a good idea for everyone to change their passwords because it seems that the setup.exe is being uploaded by a lot of members who have been here for awhile. I am sure they are a victim but they are getting banned anyway. Hopefully , everyone who reads this today will immediately change their passwords.
Click to expand...
Just in case anyone's still reading this. Do NOT do this, as it will get your new pass stolen as well.
 
Thanks for the tip on the keyscrambler. My PC once got a keylogger... if I knew this then I would've been able to breathe easier. Looking into it right now.
 
you can download the latest version of KeyScrambler (2.6.0) from the official site here:
Code: 
http://www.qfxsoftware.com/Download.htm
it works with Firefox 3.6, the above linked one is a bit outdated by now
 
I have RoboForm ... the thing generates 12 character random passwords on demand... that should do the trick.....
 
Thanks Wiz. I guess I should mention here that last saturday I received an email update to a thread I was following on here, and my anti-virus popped up saying a 'rootkit' was detected in it. I was lucky to get rid of it before any damage done, but changing my password on here wouldn't have prevented receiving the rootkit in that email.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top