Circuit City Home Theater Support Forum Hacked

[Roger]

Learn to protect yourself from the latest wave of Russian hackers!

Mega-store Circuit City was unwittingly distributing a virus for the past two weeks before it was discovered and cleaned up yesterday. Circuit City's Home Theater message boards were hacked and had been distributing a virus. This is a good excuse to for having better taste in forums. The forum’s URL is part of forum.circuitcity.com and is not part of the greater www.circuitcity.com website. So if you’ve visited the regular Circuit City site lately, don’t worry.

Visitors of the message boards using an unpatched Internet Explorer browser were liable to have the virus installed on their PCs. The virus routed victims to a website out of Russia that installs a harmful back door on your computer. This opening gave hackers control over the Circuit City Forum user's computer that could be used to steal secure financial information from the user.

Only visitors with Microsoft's Internet Explorer browser that hadn't been updated with last January's patch were susceptible. This is a good reason to keep up with those Windows Updates. The .biz website where the virus was sending victims is hosted by a Russian Internet service provider. This website happens to be on the same block of IP Addresses as a serious Internet fraud attack earlier this year that hit thousands of computers worldwide.

The Washington Post reported on this infamous attack in March. It has been identified as among the most sophisticated cases of Internet fraud yet. This keylogger hack also exploited Microsoft's Internet Explorer. Victims of this scam were duped into clicking a link to a Russian website that let perpetrators record user’s keystrokes. This opens the door to a world of your secure information including credit card numbers and other sensitive data.

The method behind the hack was a clever one and worth filing away for your personal rip-off detector. A victim name Graeme Frost in England received an email summarizing a digital camera purchase with his credit card. A link within the email was specifically for disputing the bill. Now is when the red flag should go up! Graeme clicked it and was taken to a web page that installed the password stealing program that transmitted personal and financial information that presumably he typed in himself trying to get to the bottom of the purchase. The keylogger logs his keystrokes and the hackers make off with the loot.

Dasvidanya!

Wayde Robson
Editor www.hometheaterfocus.com
Contributor www.Audioholics.com

Link To Original Article

[Josuah]

Roger wrote:

This is a good excuse to for having better taste in forums.

That's kind of a stupid thing to say. I guess Home Theater Focus is run by a elitist snob.

[Sonnie]

I wonder how a visitor is supposed to learn about a particular forum without visiting it to begin with anyway? I can see a few learning about it via various channels, but not everyone. So I have a bad taste for forums because I didn't do proper investigations prior to visiting? Hmmmm.

Hometheaterfocus usually recommends not buying electronics from big box stores and using smaller hi-fi shops instead. It was a (half) joke. Maybe the writer should have put a winky emocon next to that line.

Sonnie wrote:

So I have a bad taste for forums because I didn't do proper investigations prior to visiting? Hmmmm.

C'mon, it's not a forum per se, it's Circuit City. It's a CC sales/support line disguised as a forum. I've read incidents of posts on that forum being removed because they said something bad about the service they got at Circuit City.

Doesn't take that much investigation to see the CircuitCity name inside ... forum.circuitcity.com

If you see "McDonalds Restaurant"

Do you think because it's a "restaurant" you might actually get good food?

Josuah wrote:

That's kind of a stupid thing to say.

Sigh... no compliments on the stunning feats of investigative journalism involved in discovering the block of IPs bit that finishes the story
(note: winky emocon - joking)

Most other sources weren't putting that together, not even Cnet.

I can say this... this forum has good taste in news sources! And if you're using a private forum like this (not run by a retail outlets like McDonalds and Circuit City) you've probably got good taste in forums. (no winky emocon - sincere)

[Sonnie]

We will continue to use Focus as a news source... nobody is perfect, including the best Hi Fi shops and best restaurants.

I still think the comments was somewhat inappropriate. CC sells some fine products and provides a genuine service for many people. We just purchased an Apple iPod there the other night... they had the best price.

McDonalds food is good to some people... especially kids.

Good words Sonny, this thread raises an interesting point. Maybe only interesting to me though

Most news blogs give you one person's take, warts and all. That's what makes blogs cool.

CC Forums are an infomercial for its products and services. That's not an opinion, it's just how it is. That's fine if you want to know the return policy of your iPod.

But...

I wouldn't suggest going there for an unbiased evaluation of the merits of the iPod vs Creative Zen vs Sony Walkman.

The writer clearly never said anyone deserves to be hacked or the victim of an online crime. However he is questioning the taste of someone who hangs out at that forum.

There are too many good forums out there with nothing to sell... audioholics, avsforums, avforum and the Shack.

Consumer Reports did a story in a recent product catalogue on how people buy electronics. Consumer preference is toward retail outlets that lack competent customer service and product knowledge. That's why Sams, WalMart, BestBuy and CC are doing so well.

CR wasn't out to offend anyone who works at these places; the information was the result of consumer surveys.

Long time readers of Focus will have seen the story on Future Shop and Monster (cables). Other big box stores in the US have the same deal with Monster.

Those booths with a split screen TV that supposedly show you the "Monster Difference" are downright criminal. They only add to consumer confusion over cabling standards. And don't get me started on the "cable cult".

A retail outlet providing a "forum" are like a spider inviting a fly to tea at his cozy web. Are we really defending CC Forums as a valid place to get information? The name CircuitCity in the URL should be a red flag to any visitor.

It should be the responsibility of "real" forums (like the Shack) to warn people of that danger.

I honestly think people who hang out at the CC forum have bad taste in forums. Is that really offensive to anyone?

Thanks for reading.

BTW you guys are now back-linked.

[Josuah]

I still don't see how one's taste in forums makes it less likely for you to be the victim of a malicious attack. It doesn't really matter what your personal opinion of a forum is. I don't think Home Theater Shack or Home Theater Focus are necessarily "safer" places to visit.

I wasn't offended. I just thought it was "bad taste" to say something like that. :P AV123 and Outlaw both run forums on their sites. AudioCircles has a large number of commercial-ish forum categories. AVSForum has sales representatives (and seems to be really cracking down on some topics). CircuitCity's forums are as legitimate a place to get information. Smart shoppers get their information from many places, as you've mentioned.

[Sonnie]

So... GarbageDog... you write that blog? I chose that feed because I so thuroughly enjoy it on a day to day basis. We certainly appreciate the back link.

This is rather interesting.

I do agree that CC does a poor job of hiring competent employees to sell their products, at least in our area... and obviously according to CR, in many areas. Had I not already done some investigations on the iPod that we were looking for... I wouldn't have gotten the info at CC the other night. When we got there we had two different sales people walk by us doing nothing. I asked one of them was he the guy for iPods and he said he didn't know anything about them but would get me someone. Shortly a young girl comes around the corner and asked could she help us. I in reply asked her if she was the iPod expert (not that I needed an expert - just a comment - we knew what we wanted). She replied that she wasn't an expert but could sell us a unit. She didn't even know it was on sale. Later our friends who were with us were looking at a few of the VCR/DVD-RW units. The fella who was selling in that area reached his had up, gently raising the small info tag stuck on the counter below the particular unit in question and exclaimed that this particular unit has bla bla bla and read the info tag... then run his finger across the front of the display machine and read the labels on the machine itself... duh. There could have very well been competent employees around, we just didn't get to meet them.

We could learn something from this I suppose. First, if we are gonna shop at CC, know what we need to know before going there to buy and simply use it as a place to pick up what you want. A good reason for them to have the online ordering and pick-up service. Second, if CC has the same type of people running their forum and answering questions at their forum... I can see where folks wouldn't get that much valuable info. Granted there might be people there that are members who might know more, but I wonder if they would actually hang out there for a long time.

If we are aware of the reviews like CR provided and experiences such as ours at CC the other night... in those situations I would think we would gather that the CC forum wouldn't necessarily be the right place to go and learn about a product we wanted to buy. For those that are not that familiar with forums, I don't know that it would be considered bad taste as much as it would just being unfortunate. I also suspect this could be a large number of people simply shopping online. CC is advertised pretty well and probably a lot of people go online to shop there... run across the CC forum and it may very well be the only forum they've ever seen or know of.

As to malicious attacks... those kinds of things concern me even here at the Shack. It's hard to control what links are posted to where. I can only imagine somewhere like AVS being a nightmare to control links. Of course we are not taking credit cards or selling anything so maybe that helps us be less of a target... but there are other ways to be malicious.