E90Post
 


TNT Racewerks
 
BMW 3-Series (E90 E92) Forum > BMW E90/E92/E93 3-series General Forums > General E90 Sedan / E91 Wagon / E92 Coupe / E93 Cabrio > PSA: Avoid ECS Tuning temporarily



Reply
 
Thread Tools Search this Thread
      08-17-2017, 12:33 PM   #1
Indyeah
First Lieutenant
Indyeah's Avatar
United_States
141
Rep
374
Posts

Drives: E92 328i 6MT SGM
Join Date: Jun 2016
Location: Phoenix AZ

iTrader: (0)

PSA: Avoid ECS Tuning temporarily

Went to the site today and got warnings from the browser to avoid the site. Continued to it anyways out of curiousity. Looks like they've been hacked. The real site is nowhere to be found and attempts to install malware on your machine. Stay away until they have a chance to get it back under control.
Appreciate 1
      08-17-2017, 12:45 PM   #2
Underground6t9
Lieutenant Colonel
Underground6t9's Avatar
317
Rep
1,735
Posts

Drives: BMW 335xi, Lexus is250
Join Date: Jan 2014
Location: Eugene, OR

iTrader: (2)

Quote:
Originally Posted by Indyeah View Post
Went to the site today and got warnings from the browser to avoid the site. Continued to it anyways out of curiousity. Looks like they've been hacked. The real site is nowhere to be found and attempts to install malware on your machine. Stay away until they have a chance to get it back under control.
Just tried login in from iphone and it doesnt work
__________________

|instagram@underground6t9|
Appreciate 0
      08-17-2017, 12:46 PM   #3
CoffeeBean
Lieutenant
226
Rep
553
Posts

Drives: 640i M-Sport GC
Join Date: Aug 2012
Location: AL

iTrader: (2)

Yep tries to download a fake Flash update file. Probably ransomware.
Appreciate 0
      08-17-2017, 01:08 PM   #4
RomKaN54
Enlisted Member
Ukraine
23
Rep
38
Posts

Drives: 2009 335i 6MT
Join Date: Mar 2011
Location: Gilbert, AZ

iTrader: (0)

first FCP euro taking most of their business with lifetime warranty now site is down....
Appreciate 0
      08-17-2017, 01:14 PM   #5
Volasko
Colonel
Volasko's Avatar
704
Rep
2,603
Posts

Drives: 06 330i E90, 18 530xe G30
Join Date: Dec 2010
Location: Toronto

iTrader: (2)

Garage List
Wow strange, I was on there today and I thought my browser was having a brain fart. Did it actually download something when you went on? I skipped the message assuming it was something weird with Chrome. Interestingly enough, I got the same warning message at Turner's site.
Appreciate 0
      08-17-2017, 01:17 PM   #6
delmarco
Major
delmarco's Avatar
United_States
494
Rep
1,416
Posts

Drives: 2011 335xi Deep Sea Blue
Join Date: Jul 2009
Location: Westchester County, NY

iTrader: (1)

CRAZY! Thanks for the heads up!

Russia is at it again with the hacks!
__________________

VISIT MY GARAGE TO SEE MY BMW E90 MODS:
http://directory.e46fanatics.com/use...Mod&UcId=20832
Appreciate 0
      08-17-2017, 01:25 PM   #7
Indyeah
First Lieutenant
Indyeah's Avatar
United_States
141
Rep
374
Posts

Drives: E92 328i 6MT SGM
Join Date: Jun 2016
Location: Phoenix AZ

iTrader: (0)

Quote:
Originally Posted by Volasko View Post
Wow strange, I was on there today and I thought my browser was having a brain fart. Did it actually download something when you went on? I skipped the message assuming it was something weird with Chrome. Interestingly enough, I got the same warning message at Turner's site.
yeah i think it tries to update "flash player". Its definitely fake though don't run the installer. Side note: Chrome has a built in version of Flash, you should never have to install or update flash while using Chrome, however, it is disabled by default. If a website says you don't have Flash but need it to use the site:

1. If you dont trust the site, just leave.
2. If you 100% KNOW the site is good, you can click the icon left of the URL to enable the use of flash player on that site. (Permissions to use flash player are managed by Chrome on a site-by-site basis)
Appreciate 0
      08-17-2017, 01:56 PM   #8
John 070
Lieutenant General
1705
Rep
14,829
Posts

Drives: 335i cpe
Join Date: Oct 2006
Location: ZSP/ZPP/ZCW

iTrader: (0)

That's a shame, I got my trunk and hood struts there, best prices for those particular items, and free shipping (I'll cross shop all of the vendors, they were the best for the struts)
Appreciate 0
      08-17-2017, 03:04 PM   #9
DerekGates
AW E92
DerekGates's Avatar
United_States
27
Rep
93
Posts

Drives: 335is
Join Date: Mar 2014
Location: Pensacola, FL

iTrader: (2)

All seems to be back to normal now.

According to: https://productforums.google.com/for...rs/4eBK4ZOo1SQ

Quote:
Errol Sancaktar said:
Yes, we had a dns poisoning that caused our dns to redirect. we ended up pulling access and changing our dns provider to ensure that everything was resolved. In addition we removed all non-essential accesses.
It was out of ECS's control and was fixed quickly.
Appreciate 0
      08-17-2017, 03:41 PM   #10
AlpineBoost
Captain
AlpineBoost's Avatar
3926
Rep
852
Posts

Drives: '23 Civic Type R
Join Date: May 2015
Location: GA

iTrader: (4)

Garage List
Still acting up on mobile...
Appreciate 0
      08-17-2017, 04:41 PM   #11
Indyeah
First Lieutenant
Indyeah's Avatar
United_States
141
Rep
374
Posts

Drives: E92 328i 6MT SGM
Join Date: Jun 2016
Location: Phoenix AZ

iTrader: (0)

Quote:
Originally Posted by DerekGates View Post
All seems to be back to normal now.

According to: https://productforums.google.com/for...rs/4eBK4ZOo1SQ



It was out of ECS's control and was fixed quickly.
I'm still being redirected to the malicious site.
Appreciate 0
      08-18-2017, 07:11 AM   #12
John 070
Lieutenant General
1705
Rep
14,829
Posts

Drives: 335i cpe
Join Date: Oct 2006
Location: ZSP/ZPP/ZCW

iTrader: (0)

through all of the above I ended up at glassdoor, dang, some of the comments not nice at all.....
Appreciate 0
      08-18-2017, 07:40 AM   #13
delmarco
Major
delmarco's Avatar
United_States
494
Rep
1,416
Posts

Drives: 2011 335xi Deep Sea Blue
Join Date: Jul 2009
Location: Westchester County, NY

iTrader: (1)

ECSTuning has a facebook/instagram account.
Maybe one of us can reach out to them there.

I'm worried because I purchased tons of stuff in the past from them and if hackers have exposed their website our credit card details and identity information can be compromised!
__________________

VISIT MY GARAGE TO SEE MY BMW E90 MODS:
http://directory.e46fanatics.com/use...Mod&UcId=20832
Appreciate 0
      08-18-2017, 10:52 AM   #14
mxchris727
Captain
mxchris727's Avatar
United_States
193
Rep
666
Posts

Drives: '03 M5, '06 325i, '12 M3
Join Date: Aug 2012
Location: Westport, CT

iTrader: (0)

Thanks for the heads up!! If I went on at work (which I do occasionally), the computer's security software would permanently disable the network card. Then, IT would have to re-image my computer and I'd lose all of my stuff.
__________________
BMW GT1 (INPA, DIS, WinKFP, ect..), ISTA/P & /D is up and running! PM me if you want to stop by and code your car.
Appreciate 0
      08-18-2017, 01:10 PM   #15
kkasson
Lieutenant
United_States
187
Rep
589
Posts

Drives: 07 BMW 328i, 08 BMW 528i
Join Date: Jun 2015
Location: CA

iTrader: (0)

Quote:
Originally Posted by delmarco View Post
I'm worried because I purchased tons of stuff in the past from them and if hackers have exposed their website our credit card details and identity information can be compromised!
Nothing to worry about there, assuming their explanation was true. What happened is the DNS system was changed to make ecstuning.com redirect to a different, malicious site instead of their actual site. Their site itself wasn't affected, it just wasn't letting people get to it.

It's working for me now, except Chrome still gives a warning that it may be dangerous. But clicking past the warning correctly goes to their site.
Appreciate 1
Tim07e90130.00
      08-23-2017, 05:11 PM   #16
mike@x-ph.com
BimmerPost Supporting Vendor
mike@x-ph.com's Avatar
United_States
24140
Rep
190,687
Posts


Drives: 07-335/12-328/18-M4/21-M4CP
Join Date: Sep 2013
Location: Las Vegas

iTrader: (23)

Quote:
Originally Posted by Volasko View Post
Wow strange, I was on there today and I thought my browser was having a brain fart. Did it actually download something when you went on? I skipped the message assuming it was something weird with Chrome. Interestingly enough, I got the same warning message at Turner's site.
Not surprised since ECS owns Turner Motorsports now
Im sure they share the same server
__________________
Check out our current sale by clicking on this link!
https://x-ph.com/sale/

Phone number 702-494-9435
Appreciate 0
Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -5. The time now is 08:47 AM.




e90post
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.
1Addicts.com, BIMMERPOST.com, E90Post.com, F30Post.com, M3Post.com, ZPost.com, 5Post.com, 6Post.com, 7Post.com, XBimmers.com logo and trademark are properties of BIMMERPOST