Jump to content
Floppy Pancakes

The Attack on Our Community

Recommended Posts

Very recently, our community was attacked. 

An individual recently blackmailed myself, attempting to get money from me. I don't know why I was targeted, or if I was a random target of opportunity. The initial message is copied below:
 

Quote

Hey Floppy,

I am aware that a few years ago you bought several bitcoins and sold 
them a year or two ago.

And so I understand that you make a lot of money through your gaming 
community "rmog.us".

I would like to get some of those sexys bitcoins in exchange for not 
publishing your penis photos, personal information and compromised 
information.

I hope we can come to a financial agreement to hide everything I have 
from you.

If I don't get an answer in less than 24 hours you'll have more news 
from me, I know you're smart and you'll answer me.

I leave you attached some proof that I have these photos.

It is true that I bought and sold bitcoin years back, but that money is loooong gone. There's only two ways they could have known this information. 1. They've been in the community for a long time, or 2. They had access to my information and computers for a long time, and uncovered that transaction history. 

However, the claim that I made a lot of money through rmog.us, is false. I don't make a dime. In fact, I've put in thousands of dollars over the years to pay for everything, but very recently, I simply couldn't afford to do so any more, nor was it something I that was financially smart for me to do. Every donation that comes to revo, goes to it's own paypal account, which is obviously only used for costs for the community.

As you can see, the individual threatens to expose pictures and personal/compromise information. And yes, they did attach pictures of myself, and nudes (we're adults here right?). However, these pictures were very old, and I believe they were on the computer I believe was compromised, because i didn't even know those pictures still existed. 

I was at work when I saw the email, and I then immediately notified my staff to assume all my accounts to be compromised, and to act accordingly, which, they already knew what to do. I also then started receiving messages from various people stating the website had been hacked. The individual had defaced the website, with the following text:

Quote

This community has been vulnerated, be very careful where you register and where you play, all your records are in my hand. [email protected][redacted]

Shortly after, I received another email (in reference to telling my staff to assume I was fully compromised):

Quote

Your friends aren't going to help you at all lol.

You big troll lol.

Shortly after that email, the now defaced forms received some updated code:

 

Quote

This community has been vulnerated, be very careful where you register and where you play, all your records are in my hand.

Contact to negotiate:
[email protected][redacted]

This was not a direct attack on this community, but Floppy decided to troll, I hope I don't have to end up publishing all files and Floppy's personal photos.

(youtube embeded video)

Give thanks to Floppy, the big troll.
I'm sure more than one wants the files from your server along with those from the admin panel and police panel lol.

Around the time this was posted, the individual had begun deleting everything. The server files, the game database, and I believe the forum database. It is not my belief that they ever had any intention to return the files.

I immediately told my boss what was going on, then I went to the FBI with some preliminary information. I bought a burner phone as well, and used it to communicate with my staff and the FBI until my phone was verified clean. After sitting down with the FBI for a couple hours, I returned home, and shut down internet access to every server. I started locking them down, and regained control of the servers (the individual had changed my passwords to some servers, or just prevented the servers from booting at all. At this point, staff notified everyone in discord of the information that we were sharing with the public, and to immediately change ALL passwords to every account they own as a precaution. Fast forward to the next day, I have my computer secured, and get to work. I let the community know that the FBI was involved, and to avoid antagonizing the individual, and that there should be no discussion of attacking back, as that would only make things worse for everyone, and that's nots not something we encourage here. I later received this email from the individual:
 

Quote

You're a big troll. Congratulations.

I'm sorry for the drama I caused in your community. It wasn't the idea 
LOL.

Out of curiosity, what face did the fbi put on when they heard the 
story?

I think I'm gonna have to trade the rmog code.

Btw, when you get everything back, let me know.

Btw x2, nice video.


I'm unaware of what videos they are referring to by the last line. I assume other personal videos? But I'm not entirely sure.
Three hours later, I received this email:

Quote

Looks like u are not going to reply, and I'm tired.

You can be calm now lmao.

Btw, it's not worth spending more than one day on a person who only 
talks to his group, you're a pussy <3.

At this point, and still to this day, I haven't responded to a single email from this person, however, the last two emails do tell me he was knowledge of who I am talking to, which, is easily doable, since I had been talking about the situation on public mediums. Nor have I sent any money.

Fast forward to today.
I've recovered numerous logs from our various servers, linking some IP's the suspect had used. This, and other information about the individual, has been shared with the FBI. I also obtained logs showing that tables in our databases were being dropped, around the time I suspected.

So how did all this happen?
Sadly, I can't get into too much detail about that, and i won't be able to for a long time due to the investigation. What I can say, is that I believe that had obtained access to my computer, and my passwords for all the servers. This is why they were able to log into any server they wanted, under my name, and do what they wish. I do believe I know how they got access, but that can't be shared at this time either.

For now, all existing servers that were attacked, and other servers that we were using for other purposes have been quarantined. Logs and files relevant to the investigation have been prepared and handed over to the FBI, as well as snapshots of the server that they will be able to comb through as well in case I missed something.  I've deleted those servers now, and started new ones, while also (eventually) reducing our costs. I've changed my passwords everywhere they've been used. I've also enabled 2FA where possible, as well as some other security measures I won't be going into. I'm currently in the process of setting up a backup server on site, an off-site backup server, and a off-site cold storage backup server, for all of our databases, as well as necessary files and information. Again, there are some other security measures that have, or will be put in place to help prevent this attack in the future, but I won't be revealing them here.

So where are we now?
Unfortunately, wiped. We do have some information from the forums and other backups, but it would take far too long to comb through and vet all the data to make sure it was safe to be used. So, everything has been wiped: forums, game db, and forums. We MIGHT restore the forum database, but it will remain like it does now if we do.

 

I'm very sorry. It was my responsibility to safeguard the data and access to all of our servers, and somewhere along the way, I failed. That's on me, and I'm sorry that my lack of self discipline resulted in our community suffering this attack, and being unable to play. I understand that it is a game, but it is a community I started years ago, something I've tried to make better and better for a while now, so an attack that brings us down this far, is personal for me, because to me, I failed everyone here. And so again, for that, I am sorry. 

 

(please keep this topic free of any remarks about the individual, it doesn't do any good, and it will be hidden. Additionally, I will not be answer any further security questions, as I've already stated everything I will about it here.)

  • Like 16
  • Thanks 23

Share this post


Link to post
Share on other sites

Thank you floppy for everything you do for this community. You sound like a really cool guy to go out and have a beer with. I completely understand everything you have went through as I have went through a similar situation before. Keep up the good work and stay safe ❤️

  • Like 1

Share this post


Link to post
Share on other sites

Decent of you to explain this, even though you've got every right to not disclose such details.

Let acknowledge this, move on and forget! Good work Barnaby.

  • Like 1

Share this post


Link to post
Share on other sites

You are an incredible person Floppy, like as been said you didn't have to explain everything, but the fact that you did adds to admirable person that you are. Much love! 

  • Like 1

Share this post


Link to post
Share on other sites

Floppy man i've never spoken to you personally, only heard about you. 

But after reading this you must be one hell of a dude! Being this honest takes courage my man.

Whatever you decide or happens, we stand beside you man!

Peace!

 

 

Share this post


Link to post
Share on other sites

Thank you for being honest with the community. And in the end all we lost was some fake money in a gaming server it's not the end of the world for us. I'm glad we have the server back and we can play

 

  • Like 1

Share this post


Link to post
Share on other sites

Thanks for sharing! I'm fairly new to the community, but I think i'll be here for a long time. The reason I chose to play on Revo is because of the community, the people are great and the staff are organized and know what they're doing. As long as the community stays intact, that's all that really matters. The game is simply just a medium for us to spend time together. It's too bad everyone lost everything from their posts on the forums to their in-game property, but that's trivial when it comes to the grand scheme of things. Plus, it's nice to start new sometimes ie. I really like the new forum layout. 

Share this post


Link to post
Share on other sites

Floppy, Thank you for the honesty.  It really hurts that someone would do this to you and to this community. You put a large chunk of your life into this place... alot of us did...

Regardless of the loss of Data, the city, your city lives on. We have been through worse... there have been many times we have been at the edge of the cliff...  you always led us back.

I don't think anything is different about this time. So lead on.

  • Like 2

Share this post


Link to post
Share on other sites

Thanks for being so honest floppy, we all appreciate the work and dedication you have put into this community!

Share this post


Link to post
Share on other sites

Thanks for the honesty and keeping us in the loop.  It's always appreciated knowing what happened in an event like this, what goes on behind the scenes, and what steps will be taken in the future.

Share this post


Link to post
Share on other sites

Thank you Floppy for the work you've done for this community. I appreciate your honesty towards us. I haven't been here long (only been here for month), but I'm loving this community more and more. We just gotta keep going amd moving forward!! 

Share this post


Link to post
Share on other sites

Been around since late 2017 on and off, appreciate all the work you have done/do to build this community. Thanks for the honesty floppy as well as getting us back up and running. You seem like a really genuine dude, cheers.

Share this post


Link to post
Share on other sites

what the fuck?

 

Floppy you know where I am if theres anything you need me to do, happy to come back and help you rebuild anything if you need it.

 

---- Atlas

  • Like 4

Share this post


Link to post
Share on other sites

This is a really scummy thing for someone to do to not only you but our community as well.  I'm glad that the situation is being handled.  I appreciate you being a stand-up individual and letting everyone know what has been going on.  Thank you for sticking around and continuing to do what you enjoy.  🙂

  • Like 2

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use, & Privacy Policy.
We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue..