Bodyline Website Compromised

[rainedragon]

Just as a heads up, Bodyline’s website was compromised at some point earlier today (November 12th, 2014

Comments

[sweetmaniac]

Thank you for this information!

P.S. I would not suggest to buy from the Rakuten Store either as it might have the same Paypal-/Creditcard- and E-Mail-Account, which could be also hacked.

[rainedragon]

What was compromised was their physical website. It was probably compromised with an SQL injection attack, but it's possible (but far less likely) that someone accessed their FTP.

Regardless, the login information for those systems will be entirely independent from their rakuten site login.

It's like saying because someone hacked your facebook, they can get into your ipod.

[sweetmaniac]

Sorry I don't have any knowledge in this area (I don't know what SQL and FTP means), it was just a suggestion.

[rainedragon]

SQL is short for "Structured Query Language". Some of the common types of databases are called things MSSQL, and MySQL

[cyanideandlaace]

Eeek and I was just on earlier today too! Thanks for the warning :)

[gurt_lush_loli]

This is weird i noticed something was up because of the links in the product dicriptions. Trying to steal money I can understand but why are the hackers selling abortion pills? Is this some kind of protest? Very confused.

[rainedragon]

It's a fairly common spam injection attack. The goal is to get people to click the link or to improve the spam site's ranking in google.

[petite_rosalie]

I can't zoom in on the picture it's permanently stuck tiny and blurry. What did the picture say?

[lafarat]

They're all advertisements for 'abortion pills'.

[uchiyama_sencha]

You might can visit their website. But don't buy from or click on these weird ads. But it is not a good hacker, because you can see were the links going to, just with scrolling over them with your mouse.
It is very common type attack and pretty harmless.
Bodyline use Paypal, so your credit card won't be scammed, if you have bought Bodyline recently in last few days.

[rainedragon]

Bodyline says in their FAQ that they take creditcard payments, and I wasn't sure if they stored any of the creditcard information, which is why I mentioned it. Paypal customers are likely fine though, yes.