G00ns.net –a popular security website- has been removed from the internet.
As the day just got started in the U.S. and activity on their well-known site started to pick up, g00ns forum members and IRC users noticed something out of the ordinary. Spokesperson by the alias Plasma states: “well, a hacker came into #g00ns and started pasting passwords.” He continued: “everyone in #g00ns” was affected by this exploitation.
G00ns.net is notorious for their tag line: “we ruin your online experience.” Their website is well known for finding and exploiting code in numerous applications and web environments. After gaining access to the g00n’s server which contained personal information, “peoples dox,” and possibly the databases, the malicious users backed up the entire server, moved it to another location, killed the DNS and web server [apache], then “rm –rf’d the entire box.” Core, another g00ns spokesperson stated.
Shortly after the attack, g00ns owners demanded their users and fellow IRC users DDoS (Distributed Denial of Service) the g00ns servers to keep the attackers from gaining anymore information and access to the server.
Some IRC users state this could be the work of other security websites such as n0ths dot com or g00ns rival: the regime.
With the removal of the website from the internet, some users state they are done. With the likelihood of the database with all of the users information being published to other security groups most people are concerned about their personal information—meanwhile, the administrator of g00ns has stated “hacking is like a game: you win some, you lose some.”
Fellow IRC ops and Oppers were informed of the situation once someone by the nickname “r00tr00t” joined the network, gave themselves oper and started to remove users from the network after modifying the IRC process on the g00ns server.
Oppers scrambled to secure the links to the other servers and hub for concern they would exploit the other servers owned by other businesses and users to completely remove the network. Opper by the alias Gibby stated “it’s a good idea to change your nickserv password, as it is a possibility that the malicious user could have sniffed the nickserv password from the g00ns server.”
Four hours after the attack, opers claim “there really isn’t anything to worry about anymore, it looks like this was an isolated incident” and Gibby adds “as long as the users change their passwords, everyone should be safe.”
Some users on the network stated “it sucks to see them go because they were refreshing in the midst of the sea of Church of Scientology raids and protests.” Other users were not fazed by the attack on the g00ns, and really didn’t care.
“We’re done, that’s it” said some of the g00ns members on IRC
A special thanks to #g00ns, notjack, skinless, Partyvan IRC, Partyvan Opers and #m3n.
May 7th, 2008, posted by WhineyGeek
