Security Breach

A Blog Post for GameBanana

Over the weekend our admins detected some kind of security breach which has affected several thousand accounts. It appears that a small number of IPs had successfully logged into several thousand accounts. Some of these IPs were found to be on IP blacklists. 

We believe that bots were performing brute force login attempts on accounts and eventually gained access to some of them. I don't believe that plain passwords have been compromised as they are encrypted with salts in our member database. 

As a response we have reset these accounts' passwords and implemented several new security measures:

  1. After 5 failed login attempts, you will be blocked from logging in for 60 seconds. An email will also be sent to the account owner and a modlog entry made.
  2. If you log in from an IP that has been blacklisted by dronebl.org, it will be recorded in the modlog.

We have several more security features planned, such as 2-step authentication and irregular location notifications.

Remember to always use strong passwords. If you don't use a password manager, you should! Try keepassx.

Big thanks to mini for detecting the issue.

Posts

  • YellowJello avatar
    YellowJello username pic Joined 14y ago
    CS1.6 Manager TF2 Manager
    Not Jiggling
    91,584 points Ranked 36th
    33 medals 3 legendary 7 rare
    • 10 years a member Medal icon
    • Submitted 200 Threads Medal icon
    • Submitted 50 Maps Medal icon
    • Reached 75,000 Points Medal icon
    • 6 years a member Medal icon
    • Submitted 100 Threads Medal icon
    9mo
    Is there any way you can also require a confirmation when changing emails? I just updated mine and saved it, but there was no verification required. 
    • Agree x 1
    Jiggle Jiggle avatar
    Mantra
    Jiggle Jiggle
  • andiargetlam avatar
    andiargetlam username pic Joined 1y ago
    Connecting.....
    Outlaws Flag Affiliation: Outlaws
    1,978 points Ranked 2633rd
    19 medals 2 legendary 3 rare
    • 2017 Top Contributor Medal icon
    • 30 submissions featured Medal icon
    • 10 submissions featured Medal icon
    • GameBanana’s Christmas Giveaway 2017 Day Nine Winner! Medal icon
    • Returned 1000 times Medal icon
    • One month a member Medal icon
    andiargetlam avatar
    andiargetlam
    Outlaws Flag
    Affiliation
    Outlaws
    9mo
    Just wanna ask, how to know that my account get affected? and is there's important information stealed from my email or else if my account get affected?
    Artistic Recoil avatar
    Mantra
    Artistic Recoil
  • Ring-A-Ding Rampage avatar
    Ring-A-Ding Rampage username pic Joined 7y ago
    In Extremis
    4,243 points Ranked 1192nd
    74 medals 9 legendary 20 rare
    • Submitted 60 Sprites Medal icon
    • Thanked 500 submitters Medal icon
    • 15+ Entries! GameBanana’s Christmas Giveaway 2015 Medal icon
    • Submitted 100 Skins Medal icon
    • Reached 100 subscribers Medal icon
    • 15+ Entries! GameBanana’s Christmas Giveaway 2016 Medal icon
    Ring-A-Ding Rampage avatar
    Ring-A-Ding Rampage
    (づ。◕‿‿◕。)づ
    9mo
    tom : 2FA sounds cool, will I be able to use it with Authy?

    Steam does not support Authy and it was really irksome to install Steam mobile app just for 2FA :D.
    I'mma deck you in the schnoz. avatar
    Mantra
    I'mma deck you in the schnoz.
  • KonataHamster avatar
    KonataHamster Joined 8y ago
    Ripe Supporter
    Offline
    17,964 points Ranked 249th
    33 medals 2 legendary 8 rare
    • Returned 5000 times Medal icon
    • Became a Ripe Supporter Medal icon
    • Returned 1000 times Medal icon
    • 10 submissions featured Medal icon
    • 6 years a member Medal icon
    • Submitted 30 Polls Medal icon
    9mo
    So if I wasn't logged out my accounts safe?
    Oversensitive sociopath avatar
    Mantra
    Oversensitive sociopath
  • Stark Raven avatar
    Stark Raven Joined 6y ago
    Offline
    6,154 points Ranked 788th
    13 medals 4 rare
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2015 Medal icon
    • Returned 1000 times Medal icon
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2016 Medal icon
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2017 Medal icon
    • 6-10 Entries! GameBanana’s Christmas Giveaway 2014 Medal icon
    • Reached 1,000 Points Medal icon
    9mo
    Thanks for the update.
    Default User
  • NekroMancer avatar
    NekroMancer username pic Joined 3y ago
    SC Manager HL Manager
    @ffline
    105th Inc. Flag Affiliation: 105th Inc.
    2,371 points Ranked 2174th
    26 medals 3 legendary 7 rare
    • 30 submissions featured Medal icon
    • Returned 5000 times Medal icon
    • 2017 Top Contributor Medal icon
    • Returned 1000 times Medal icon
    • 10 submissions featured Medal icon
    • Achieved Game Manager clearance Medal icon
    NekroMancer avatar
    NekroMancer
    105th Inc. Flag
    Affiliation
    105th Inc.
    9mo 9mo
    If an account was affected, what does it mean?
    D34D avatar
    Mantra
    D34D
  • tom avatar
    tom username pic Joined 17y ago
    TBS2 Manager Super Admin
    Offline
    55,481 points Ranked 67th
    56 medals 12 legendary 10 rare
    • Achieved Super Admin clearance Medal icon
    • 10 years a member Medal icon
    • Thanked 500 submitters Medal icon
    • Submitted 200 Blogs Medal icon
    • Submitted 200 Threads Medal icon
    • Submitted 60 Polls Medal icon
    tom avatar
    tom
    test 1 2 3
    9mo
    If you got a security breach email your account was affected. If not, you should be ok. As a precaution though, ensure you have a strong password.
    testing 1234 222
  • Captiva avatar
    Captiva username pic Joined 2y ago
    CS:S Manager CS1.6 Manager
    Do a Job
    Life Tree Flag Affiliation: Life Tree
    22,790 points Ranked 202nd
    44 medals 5 legendary 9 rare
    • 30 submissions featured Medal icon
    • Submitted 100 Skins Medal icon
    • 2017 Top Contributor Medal icon
    • Reached 100 subscribers Medal icon
    • Returned 5000 times Medal icon
    • 10 submissions featured Medal icon
    Captiva avatar
    Captiva
    Life Tree Flag
    Affiliation
    Life Tree
    9mo
    Has my account been affected, too? D:
    不可能はない avatar
    Mantra
    不可能はない
  • Ghost1420071 avatar
    Ghost1420071 username pic Joined 3y ago
    Offλine
    1,606 points Ranked 3266th
    22 medals 5 rare
    • Returned 1000 times Medal icon
    • Received thanks 50 times Medal icon
    • GameBanana’s Christmas Giveaway 2017 Day Nine Winner! Medal icon
    • GameBanana’s Christmas Giveaway 2017 Day Fifteen Winner! Medal icon
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2017 Medal icon
    • One month a member Medal icon
    9mo
    Has my account been affected?
  • BlaXe avatar
    BlaXe username pic Joined 5y ago
    Online
    17,949 points Ranked 248th
    39 medals 7 legendary 6 rare
    • Returned 5000 times Medal icon
    • Reached 100 subscribers Medal icon
    • 1st Place - 2016 Uberstyles Contest Medal icon
    • Thanked 500 submitters Medal icon
    • 15+ Entries! GameBanana’s Christmas Giveaway 2016 Medal icon
    • 1st Place - 2017 Uberstyles Contest Medal icon
    BlaXe avatar
    BlaXe
    Uberstyle Expert
    9mo
    Great job guys.
    Making new Uberstyle! avatar
    Mantra
    Making new Uberstyle!

Embed

Share banner
Image URL:
HTML embed code:
BB embed code:
Markdown embed code:

Blogger


tom avatar
tom username pic Joined 17y ago
TBS2 Manager Super Admin
Offline
55,481 points Ranked 67th
56 medals 12 legendary 10 rare
  • Achieved Super Admin clearance Medal icon
  • 10 years a member Medal icon
  • Thanked 500 submitters Medal icon
  • Submitted 200 Blogs Medal icon
  • Submitted 200 Threads Medal icon
  • Submitted 60 Polls Medal icon
Sign up to access this!
Sign up to access this!
Sign up to access this!

Game

Sign up to access this!

Category

Details

Initiative
None

Share

  • Share on Reddit
  • Share on Twitter
  • Share on Facebook
  • Share on Google+

Stats

  • 550 Views
  • 11 Posts
  • 9mo Submitted
  • 6mo Modified

More from Submitter

WiPs by Submitter

bcp.crwdcntrl.net tracking pixel