DNR Collaborative (Mixcontrol Pro etc) site hacked

[Guenon]

EDIT: DNR support affirmed that customer data and forum accounts/passwords are safe and haven't been compromised. They are stored on a separate secure server which isn't affected. That's very good news

--- Original post below:

A while ago I went to the DNR Collaborative site to download the latest version of Mixcontrol Pro from the user area. The downloads didn't work (returning a PHP error message), so I left a support request which has gone unanswered.

Now I tried it again, and the download section is even more broken. I figured I'd ask about obtaining the latest version on their forums, and when I clicked the forum link it only showed me this message:

"The DNR website and community forums have once again been hacked. We have rebuilt the website currently, but no longer will we provide a forum on our own servers just so they can get hacked once again. Please use our contact form located at http://www.teamdnr.net/contact/ to get in touch with us personally, and we will respond no later than 24 hours from your contact"

A couple of things come to mind:

Fair enough, it seems there are more pressing matters at the moment than answering individual support requests. However... the website and forums have been hacked "again"? I have completely missed all the previous security breaches. Has there been a notification to your customers about this? Has any customer data been compromised? How about forum/account passwords and such? This is the reason I'm making this thread, I'm pretty sure there are people who also didn't know this was happening.

[Resonator63]

Worrying indeed.
When you think how many companies out there have our details,everytime one gets hacked I guess it puts us at risk in the process.
Hope they get it sorted out ok

[MFXxx]

Sorry to see, hear and be impacted by this. Went on yesterday to try and grab R6 and realised something was wrong.

Why do these arseholes do such things, especially to smaller individuals who are trying to scrape together a living. I can understand if they hit large corporation or organisations of dictatorships that are forging illgotten gains via illegal activities, war crimes, slavery and the like. But no they dont have the balls, intelect or capability of actually astounding us with amazing skills. People who do these actions are no worse than the scum that would steal candy from a baby or rape a poor ol granny!!!

Hope you get it sorted soon and dont loose too much. Trust all our details are safe. Probably explain why I am starting to get junk mail in my secure email that has never been contaminated up until this weekend

No worries...I can onlyh say thank you for your generosity in releases with the 2 year subscription package I have from you guys.

[Guenon]

DNR support promptly replied the email query I sent a moment ago, and they told me customer data and forum accounts/passwords are safe. They have all the critical data on a separate secured server. So no worries about that ... I better edit the original post as well.

[MFXxx]

DNR support promptly replied the email query I sent a moment ago, and they told me customer data and forum accounts/passwords are safe. They have all the critical data on a separate secured server. So no worries about that ... I better edit the original post as well.

That's good to know. To be honest these guys do not deserve any wrong doing. Always been good, generous, supportive and helpful in my humble experience.

[pandashake]

Not sure what's up with Reason, other than I know that this has been compounded by Stephen's and his own health issues. I left him a message on the 25th of last month and have still not heard anything.

[rlahalla]

I'm here. Just overloaded. My pops got diagnosed with Alzheimer's and the rest of the company booted on him when they found out, so everything got plopped into my lap. The hacked website was just the icing on the cake. It's taken me days upon days to fix the damn thing, but I think it's finally fixed completely. The user download section has pretty much been rewritten and the site has been updated with all new site software, so it should be working properly again. Customer data was never altered or compromised since it sits on a separate server now. On top of that, we don't take the customer data from Paypal, we let them deal with the financial stuff. All we keep is email and the like, but again, on a separate server. I wasn't going to deal with the forum since it got tore up so bad. I'll ask Ben to re-instate the DNR forum here soonish. The e-mail system was also completely deleted from our system, so anything sent to the DNR support address prior to about 4 days ago should send in another support request.

[VitaminD]

Reason: Please check your files (not the zips, but your webpages.. the javascripts etc).. I think they embedded some virii onto the site.

http://www.kvraudio.com/forum/viewtopic ... 07#4823207

[rlahalla]

Reason: Please check your files (not the zips, but your webpages.. the javascripts etc).. I think they embedded some virii onto the site.

http://www.kvraudio.com/forum/viewtopic ... 07#4823207

It was actually an exploit left from an old WP plug-in that they used to get in. It took forever to find exactly which one it was, but it was an eval() code injection that would continue replicating until WP and all associated plug-ins were updated and/or removed. I'll need to monitor the site for the next 24 hours, but so far it's running a lot smoother than it was previously.

[Resonator63]

Sorry about the troubles you're having rlahalla.
Avast isn't flagging the site up as infected now.
Hope you get everything sorted ok.

The hackers want shooting,they are idiots.

[VariKusBrainZ]

The only site I wory getting hacked it Paypal. Devs only have our contact details and any other info you foolishly decide to divulge.