Site Blog

Hello,

Over the past couple of days, a number of users have been receiving malware warnings for visiting Egg Cave. On Monday, March 7, our data center's web-based support center was compromised. Our data center's support center contained a number of unencrypted root passwords to servers that they manage. Egg Cave was one of them. The hacker proceeded to log in to Egg Cave's server and modify some system files that dynamically injected malicious javascript tags into some of our pages. This code, at random times (not to be too suspicious), initiated malware downloads on users' computers.

Since this discovery, our data center has erased their entire support center's database (including the root passwords to servers) and released patches to all of their servers, fixing the affected system files. Egg Cave has been cleared of all "malware blacklists" at Google, Firefox, Opera, and many others. Egg Cave is malware free.

If you have visited Egg Cave between March 7 through March 10, it is strongly recommended that you change your Egg Cave password immediately.

If you visited Egg Cave between March 7 through March 10, do not assume that your computer has been infected with malware. You know that your computer has been infected if you physically saw a download window pop up on your computer and you couldn't stop it. If you received browser warnings or antivirus warnings from visiting TDN, there is a high chance that these programs caught the malware before it was ever able to download or install. In general, you can't get malware from simply loading a page; the program has to download and execute, which you would be able to see.

Lastly: based on the evidence we have, the hacker was not an Egg Cave player or interested in Egg Cave accounts. Multiple servers in our data center were affected by this; each server hosted diverse types of web sites.

A NOTE TO CASH SHOP PARK SUPPORTERS: If you have made any purchase from the Cash Shop Park, your financial information is safe because we do not store it (nor will we ever). Only Paypal does.

A NOTE ABOUT UNHAPPY EGGS: All creatures on Egg Cave are now 100% happy. We realize some users have not been able to access Egg Cave to feed their eggs because of the security issues.

A NOTE ABOUT DEAD EGGS: If any of your creatures have died because of these issues, please submit in a ticket and we will restore your creature.

Initiating stricter security sequence. Success.

We sincerely apologize for any inconvenience caused. Our server is now stable and we have taken extra steps to apply even stricter security settings to our server and to Egg Cave. We are happy to answer any questions you might have; please Contact Us if you'd like.