AOKP Forum Infected With Malware, All Usernames and Passwords Compromised

Oh, the Internet. It’s a fun and beautiful place for the most part, but sometimes, it can be a real pain in the ass. Unfortunately for our friends in the Android Open Kang Project, their forum (aokpDOTco) has come down with an illness, malware to be exact, and all of their user’s usernames and passwords have been compromised. AOKP’s founder, Roman, took to Google+ to break the bad news and to advise people who signed up that this would be a good time to change up your passwords. 

Fans of AOKP,

Yesterday we got reports of http://aokp.co being infected with malware. We did some investigation and it looks like our site did get compromised by some sort of malware.

All usernames and passwords were compromised.

Yes, this sucks, and I take 100% of the responsibility for what happened. I am very sorry to everyone who registered on the site. The silver lining of the event is that site registrations have been closed for many months as it is, and we’ve been using RootzWiki as our main “forum.” I will see what I can do about sending an email to all of the registered users and notify them of the incident.

It looks like only the actual site (http://aokp.co) was affected – gerrit and everything else was untouched. I’ve taken the site down completely for now. You can still get your builds from AndroTransfer or Goo-Inside.me.

Please please please change your passwords and remember to keep your email password just a little more secure! If you used the same email/password combo elsewhere, now would be the time to go and change it as well.

Roman

***Note: no, the passwords were not stored in plaintext

AOKP has made RootzWiki their homebase for a while now, but still, this is never a fun thing to happen.

Via: Google+