GameReplays hacked, 5000 accounts stolen

Some 5000 email addresses and passwords have been allegedly stolen from gaming web site GameReplays.org and posted online.

While administrators had encrypted the account passwords, the hacker EcecusHxc had found and published the salts used to protect them.

Salting adds variability to passwords and makes it harder attack them using rainbow tables.

Only 20 of the email accounts contained .au domains, and the majority were registered with Gmail and Hotmail.

EcecusHxc did not state how they allegedly hacked the gaming strategy site, but the forum had run an outdated version (2.1.7) of Invision Power Board.

It did not appear to have posted an advisory warning users of the alleged breach at the time of writing.

Copyright © SC Magazine, Australia