And now hackers may have your credit card info
Submitted by fightlinker on January 27, 2012 - 4:59pm
Mucking with a website is a pain in the ass for webmasters, and doxing someone can cause them all sorts of headaches, but overall they're not the worst things that can happen to you on the internet. The sh*t really starts hitting the fan when hackers get a hold of your data. Especially when that data includes customer information and credit card numbers. That's exactly what may have happened today as hackers continue to take Dana White up on his dare to hack his site again:
An infamous hacker with the handle ‘S3rver.exe’ hacked and defaced the web pages of both UFC.com and UFC.tv
Having previously breached the online security defences of Sony Pictures and played havoc with their website, S3rver.exe apparently did not find it particularly taxing to break through the digital walls of the UFC domains.
“I hacked those 2 sites this morning. One of them has 60+ vulnerabilities and ufc.tv has XSS, BlindSQL Injection and other vulnerabilities,” he told SoftPedia. The ‘SQL Injection’ is noteworthy as it is considered a rudimentary form of hacking and if that method was available, it means that the UFC site has at least some poorly-written code and could be exploited by hackers with fairly basic levels of skill.
Last week’s hack on the UFC site apparently did not involve any data stored on the site, such as credit card details of customers who had purchased from the UFC webshop. But the hacker responsible for the latest invasion has specifically stated that he has accessed and copied such data from the site. He says he will post the data to the torrent site PirateBay if there is further provocation from White.
Here's hoping Dana White doesn't think this is a bluff. Over Christmas Anonymous hacked a security company and used the credit card info they found to donate tens of thousands of dollars to charitable organizations. Pretty funny when it's not your money, I'm sure. No word yet on who has to worry about their info being compromised, but if you've bought a stream off UFC.com or through their vault I'd recommend changing your passwords and keeping a close eye on credit card purchases.
January 27, 2012 - 5:54pm
#2
well, well, well....
i guess dana isn't the brilliant businessman we've been told he is after all?
encouraging them to hack his site was like encouraging a locksmith who happens to be a rapist to break into your house while your wife is home alone, sleeping.
sure you may catch up to him eventually and put him in jail for awhile. but in the meantime, your wife was raped. and impregnated.
another brilliant decision from genius businessman dana white.
January 27, 2012 - 6:03pm
#3
That sounds like a frame-bang to me, Volds.
January 27, 2012 - 7:14pm
#4
I'm way on top of this by never actually giving the UFC any of my money.
January 27, 2012 - 7:32pm
#5
I anyone can bait them with smack talk it's going to be Dana White. I hope this escalates and gets awesome.
January 27, 2012 - 8:51pm
#6
last time i bought something from ufc.com was in 06. with a now invalid card. so, cool.
January 27, 2012 - 8:58pm
#7
Oh Dana... Does he and the Fertittas really not have enough money?
January 27, 2012 - 9:03pm
#8
dana white and the hackers are about the same level as despicable. It will be assholes like anonymous and their nazi imagery, political attacks and unbelievably arrogant claim of helping democracy in the middle east (lolol), that cause ACTA to fuck the internet forever.
Thanks, Anonymous, for ruining the internet for everybody. Dana white is like a kid with a gun, I can't really hate him for accidentily shooting himself in the chest, he's just a dumbass from a time before the internet.
Also I think i bought the vault for a single year but this was before they changed the website/etc. Do you internet wizards know if my credit card information is in their servers? or would it have been deleted when i lost my registration / the vault moved to ufc.tv ?
January 27, 2012 - 9:42pm
#9
i'm warming up to dana. this guy might actually be.. cool.
January 27, 2012 - 10:22pm
#10
One time some a-hole stole my credit card number and bought a couple thousand worth of DJ equipment.
Sure, I was surprised as shit when I go the bill and I had to make a bunch of phone calls. But I didn't have to pay the bill.
A headache, not the end of the world.
January 28, 2012 - 6:07am
#11
sooo... was the site actually hacked or what? putting script into the url to make a guy fawkes mask pop up isn't exactly hacking a web site. besides, no one sees it unless they use the modified link,
but if you just goto the normal signup page,
https://ufc.tv/ufc/secure/signup
nothing.
there is nothing to say that the database was compromised at all.
As for the dana dox'ing, turns out the phone number belongs to a woman who is not affiliated with dana or the ufc. why would there be a digital copy of his birth certificate? from the late 1960's, cmon! everything else posted,
can be accessed easily. (it's interesting to find out, if it's true, that dana's house was bought for 2mil, but is only worth 450k now).
January 28, 2012 - 11:02am
#12
hahahahaha, dubstep
January 28, 2012 - 12:54pm
#13
Now they are posting fight info. They just posted Mayhem's personal info http://pastebin.com/LZzccviS
January 28, 2012 - 1:12pm
#14
and this is why these guys are d-bags. what did mayhem do to them? Honestly, if you wanted to mess w/ one of Dana's fighters to piss him off mayhem probably isn't the best one. I'm pretty sure he's still on dana's shit list for the epic egg he layed against bisping.
January 28, 2012 - 1:17pm
#15
yeah maybe go after a champion
January 28, 2012 - 1:30pm
#16
"Dana you want to put your fighters in danger?"
Anyone with Internet access and nothing better to do could easily get this info. Time to get scared Dana.
January 28, 2012 - 1:30pm
#17
I can't even begin to wrap my head around why Mayhem of all people was the first target. Seems more plausible that whoever did it has no idea who he is.
January 29, 2012 - 3:47am
#18
January 29, 2012 - 12:51pm
#19
their webmaster needs to forward ufc.tv to www.ufc.tv for that certificate
it looks like google links to www.ufc.tv so it's not a problem for the most part
Aaaaaand HERE WE GO!