Download

Forums Hacked (Apparently)

Hi guys,

I received what seems semi-legit email from “Epic Games” suggesting the forums have been hacked. Yet there is no information on the main website, blog or forum announcements pages. My password has not been “reset” as stated and the email links do not seem legit either.

And… I can still log on here without any issues.

Could anyone confirm if this is real or not? I am a little worried as my forum and billing account seems to be merged some time ago so a potential hacker has possibly got my details there too!

Sounds like a phishing attempt.

I never click on the “Click here to log in” links in emails. It diverts you to a page and captures your log in details. If you did use an email link to log in, please change your password as soon as possible!

Can you look at the log in link by putting your mouse over it, and seeing what it is in the status bar?

Its legit but its the ‘old’ forums (guessing you’re registered on both). I flagged up an issue to Epic recently over hijacked links on the old site. That got fixed quickly or so it seemed, but maybe hackers returned or hadn’t left. Either way the old forums are still down. I wouldn’t worry unless you’re using the same login & password on here…

[FONT=Arial Black]"We have just discovered that the Epic Games forums located at https://forums.epicgames.com were compromised by a hacker. We are sorry to report that the incident may have resulted in unauthorized access to your username, email address, password, and the date of birth you provided at registration.

We have taken https://forums.epicgames.com offline. When the site reopens, your password will be reset. If you use the same password on this site which you use on other sites, we recommend immediately changing your password on those sites as well.

The affected forum site covers UDK, Infinity Blade, Gears of War, Bulletstorm, and prior Unreal Tournament games. However, the separate forum sites covering Unreal Engine 4, Fortnite, and the new Unreal Tournament were unaffected."

http://click.news.epicgames.com/?qs=e55a3ad49982ac000ea915d57207728f9c5c43bf7c4782859400c5cd8b79f325 was the link.

That doesn’t seem legit to me considering it goes to some “mimecast” website. I just closed it down.

Its so early in the morning i didnt read the bottom line. As they are linked, I am still worried. Guess I should just start resetting passwords again.

I also got the mail, the link is not sketchy, it’ll redirect you to the old official forums, which are currently down.

Epic forums hacked! Not UE4 forums!!

Man, those script kiddies have way too much time on their hands. What is the fun in hacking some forums??

All the best to Epic to resolve all of this!

edit: ****! there is already a topic on this: https://forums.unrealengine.com/showthread.php?76549-Forums-Hacked-(Apparently)

The old forums have been offline for days now. No ETA on when they’ll be back up either…

I have merged the two threads as they are about the same exact topic. Thanks. 8-}

Ah, thanks :slight_smile: Saw this topic too late.

No problem man … just doing my job. 8-}

Baby steps. It’s like us Unreal Engine devs. Which one of us hasn’t done an endless runner by now? :slight_smile:

Well, I didn’t :stuck_out_tongue:

So this is their way of getting a job at Hacking Team then? :wink:

The fishy thing is writing “https://forums.epicgames.com” and having it link to “http://click.news.epicgames.com/?qs=xcxcxcxc”.

That is bad and shouldn’t be done.

Hey everyone,

Just wanted to let everyone know that it was an official email and not a scam. The hack only pertains to the older forums and not the newer ones. If you have a UDK, Infinityblade, Bulletstorm or other previous title forum account, please update your passwords and any associated email address passwords. This did not affect the UE4, Fortnite or Unreal Tournament forums, as they are on a different system. The email has more details.

Thank you all for your understanding.

I have an old UDK account. The trouble is, with the forums down, I can’t tell which password it is. It should be an old one, but is there a way to check?

Why did someone rate this 1 star? haha

Thanks Alexander. I am in the same boat as Jezcentral, I have no idea what password was used back then. I am glad it is isolated from these though.

Right now there is not a way to get that information. We will keep the community updated on when that will be available again. I don’t have any ETA at the moment.

Alright, the UDK forums are available again!

Whoo hoo! :slight_smile: