The administrators of the uTorrent Forums have posted a security alert on their website, warning users of a breach in their forum database that allowed an unknown attacker to steal their users' information, including password hashes.
uТorrent is a BitTorrent client, the most popular today, created by Ludvig Strigeus and later acquired by BitTorren Inc. Just like in any software application, the project development team runs a forum on their website, where users can make requests, read announcements, or get in touch with the developers and each other.
Three days ago, on June 6, the uTorrent team announced a hack on their forum, which they were informed about by their forum software vendor.
uTorrent runs an IP.Board forum on the cloud-based service provided by Invision Power Services.
The vendor informed them that one of their customers had suffered a data breach and that the attacker had also gained access to other Invision customers, including their uTorrent account.
The company told uTorrent that the attacker downloaded user information. It is still unknown what kind of data the attacker accessed and downloaded, but the uTorrent team believes that all passwords are at risk, even if they were hashed to protect their content.
“As a precautionary measure, we are advising our users to change their passwords. Although passwords are not publicly available on the forum, these hashed passwords should be considered exposed,” the statement. “Anyone using the same password on the forum, as well as other sites, is strongly encouraged to update their passwords and/or implement good personal security practices.”
The uTorrent forum has more than 385,000 registered users. On June 1, Invision Power Services released a security update for the IP.Board forum platform, but it is currently unknown whether this was the attacker's entry point.
