The Freakybob.site Hacking Incident...

The Freakybob.site Hacking Incident

The Freakybob.site hacking incident was an event that occurred on December 24, 2024, when Squirrel’s Cloudflare account was compromised, leading to changes in the DNS settings that displayed a threatening message. This is the detailed account of how the incident unfolded and how the Freakybob.site team responded.

Initially, the website was functioning normally until the hacker gained access to Squirrel’s Cloudflare account, changed the password, and altered the DNS settings to redirect visitors to a ransom note. The note demanded $300 to restore access, with the threat of permanent deletion if the demand wasn’t met within 48 hours. Despite attempts by team members to log in, they were locked out due to the password change. Meanwhile, subdomains and GitHub Pages sites remained unaffected.

After extensive efforts, Squirrel regained access to his Cloudflare account and reset the password. The DNS settings were restored, and the malicious message was replaced with the GitHub Pages 404 error. Following this, the Freakybob.site team worked to restore the website, successfully eliminating the hacker’s control.

This incident marked a significant challenge for the Freakybob.site team and stands as a reminder of the importance of robust security measures. Thanks to the collective efforts of the team, the website is now fully operational.

Written by mpax235