Announcement! Warning: Donation system hacked

[meissen]

Guys,

BlackBirdDaddy alerted me today that our donation system was compromised. On 10/27 we received a donation and it went through like normal. Sometime between that date and today, someone hacked into the back end of the website and changed the paypal address where the donations are sent. This resulted in any recent donations going to the fraudulent account. I've alerted those who donated during the problem time period so they can open disputes with Paypal.

I'm disabling the donation for the time being until I can be certain that this will not happen again. If you do insist on donating before I re-enable the system, please manually send the donations through paypal to paypal@mifbody.com

[MeenZ28]

What a crappy thing to do this time of year....

[98blackbeauty]

Damn B, did you get that $1,000 donation I sent!

[sman]

Wow, thats shitty.....

Thanks for letting us know B. Keep up the good work!

[Darren]

ouch that sucks

[Gaspo]

Damn B, did you get that $1,000 donation I sent!

ya, i sent one too! i cant believe someone would hack into a "donations" thing. people are heartless

[TylerT/AZ28]

how do you even hack something like that

[meissen]

how do you even hack something like that

That's a darn good question. I posted on the product's vBulletin.org thread looking for answers but alas holiday weekend no response yet. What really bothers me is that the change does not even show up in the logs, but I can see when I changed it back.