also @ TechSpot: RIM axes another 2,000 jobs as part of ongoing restructuring plans

Steam forums shut down due to security breach?

By

On November 7, 2011, 2:00 PM EST

Steam’s official forums are currently offline for what is being called a maintenance issue, although there’s reason to believe that the site’s vBulletin forum software may have been hacked. Valve hasn’t commented on the issue yet but some gamers noticed a suspicious message on the forum last night that suggests a security breach.

Eurogamer was contacted by a Steam user who said a group known as fkn0wned changed the text on the forum and spammed some user’s email addresses. The text reads as follows.

Ever wanted to dominate the servers you play on with guaranteed results, but you were too afraid to cheat because of ban risks? Visit Fkn0wned.com. It’s safe, secure and undetected. Along with hacks, we’ve also got some general discussion sections, hacking tutorials and tools, porn, free giveaways and much more. This site has been conditioned to meet all of your needs in terms of resources so be sure to take a look and tell us what you think. Thanks again, the fkn0wned team.

At this point it’s unclear whether any private data like passwords or billing information has been compromised. The breach likely took place sometime last night and as of writing, the Steam’s forum is still “down for maintenance.”

If we had to take a guess, we’d point the blame at Valve’s use of forum software vBulletin which has seen its share of security breaches in the past. Just to be on the safe side, we would advise anyone reading this to change your Steam forum password and perhaps do the same at any other sites where you use the same login credentials.

Related Stories

, , , , ,

User Comments (18)

Post a comment
TomSEA
on November 7, 2011
2:03 PM

LOL...well I'm glad to see that they offer pRon along with all their hacking tools. :p

Reply

example1013
on November 7, 2011
2:07 PM

I'm sure that site is totally legit and doesn't install any malware at all.

Also, Steam has forums?

Reply

Guest
on November 7, 2011
3:45 PM

Unfortunately you just advertised the naughty website.

Reply

Leeky
on November 7, 2011
3:58 PM

Are the Steam forum's user credentials and the login in credentials for the Steam client the same?

Or do you have to register for both separately?

Reply

Guest
on November 7, 2011
4:02 PM

You have to register for forum accounts separately from your steam account. Although, I'm sure most users use the same login info.

Reply

herpaderp
on November 7, 2011
4:05 PM

Leeky said:

Are the Steam forum's user credentials and the login in credentials for the Steam client the same?

Or do you have to register for both separately?

Separate. Of course, anyone fool enough to use the same for both is probably going to find out that was a bad decision...

Reply

Leeky
on November 7, 2011
5:25 PM

Separate. Of course, anyone fool enough to use the same for both is probably going to find out that was a bad decision...

Aye, but I wasn't sure if it was one global login that encompassed all Steam services or not, hence asking for confirmation. Thanks for letting me know.

Reply

motrin
on November 7, 2011
5:27 PM

HEY I WAS ON THEM FORUMS when this happened. took some screen shots w/ my phone

[link]

and

[link]

Reply

Leeky
on November 7, 2011
5:42 PM

Thanks for the share Motrin.

Looks pretty bloody clear they were hacked (assuming that is the Steam forum as I can't say I've ever seen it before) looking at those screengrabs!

Reply

r8bwp
on November 7, 2011
6:02 PM

yes thats the steam forum...... sticky is an admin

Reply

motrin
on November 7, 2011
6:20 PM

well they shut down the forums with in minutes after the post was up. looked like only the valve admin account was hacked but hey maybe more thats why they shut down everything

Reply

Rasta211
on November 7, 2011
6:21 PM

I hesitate to upgrade to the latest browser because of add-on incompatibility as well.

Reply

Guest
on November 8, 2011
4:00 PM

This is Anders from vBulletin. Just wanted to mention that we do not agree with this statement and feel it is unsupported. We take security reports very seriously and vBulletin software is very secure.

"If we had to take a guess, we'd point the blame at Valve's use of forum software vBulletin which has seen its share of security breaches in the past."

Reply

DeliciousPie
on November 8, 2011
6:53 PM

Guest said:

Unfortunately you just advertised the naughty website.

Exactly what I was thinking :/

Reply

Guest
on November 9, 2011
9:33 PM

My account details and password were used to attempt a login with my Google account. The only thing that shared the same password, and had my email address on file. I forgot to change my steam password, and as such Google blocked access to my account until I managed to provide my security details.

The login details are as follows

Access Type [ ? ] Location (IP address) [ ? ] Date/Time

Unknown Ukraine (volia.com:77.122.54.68) Nov 8 (1 day ago)

Reply

PinothyJ
on November 9, 2011
11:55 PM

Guest said:

This is Anders from vBulletin. Just wanted to mention that we do not agree with this statement and feel it is unsupported. We take security reports very seriously and vBulletin software is very secure.

"If we had to take a guess, we'd point the blame at Valve's use of forum software vBulletin which has seen its share of security breaches in the past."

Until you pull your finger out and stop being a "guest" all of your opinions are invalid?

Reply

superty12
on November 10, 2011
5:10 PM

It's a security breach. Steam just notifed me.

Reply

motrin
on November 10, 2011
6:56 PM

yea check out the forums. updated

Reply

Browse more commented news

Post a new comment

Guest user

To post as an anonymous
user click here
.

Members

If you are a TechSpot member,
please login first.


By signing up you gain complete access to the TechSpot community. Join thousands of computer and technology enthusiasts that contribute and share knowledge in our forum. Post messages, get a private inbox, upload your own photo gallery and more.

Subscribe to TechSpot

Get free exclusive content, learn about new features and tech breaking news.