Search Archive

Administration Hijack

By DataAve · May 08, 2009in Off-Topic💬 8 posts👁️ 1,948 views
Posted May 08, 2009 · 21:10 UTC#1

Got this email (SPAM) in my in box, here at the board! Looks like there was a breach, JasonH.

 

From Forum administration

 

Sent: Fri May 08, 2009 6:23 pm

From: profilicus

To: DataAve

Important to read!

 

"Important to read" was a link to a Drug Site!

Posted May 08, 2009 · 21:41 UTC#2

Yeah I'm looking into it. I don't think the person got into the admin controls. They seem to have just sent that spam PM to every user, most likely by using some kind of automation program.

Posted May 08, 2009 · 21:55 UTC#3

I never got that PM, maybe it's just some dude sending at random?

Posted May 08, 2009 · 22:27 UTC#4

I too did not receive any spam from the forum, if it helps you track it down at all.

Posted May 08, 2009 · 23:22 UTC#5

Came from here to my email on record here (like when you subscribe to thread) That is probably why some didn't get it, because you weren't subscribed to that thread. When I clicked link, came here to my inbox with the same message as if the Admin PM'd me.

Posted May 09, 2009 · 01:56 UTC#6

Hmm that's pretty weird. Maybe I banned him before he got everyone?

I know at least 1,000 members got hit by it. Looking at the logs, the server sent about 1,300 emails today...and that's just members who have email notification turned on. Normally the server only sends about 200 emails a day.

Posted May 09, 2009 · 15:35 UTC#7

Very odd, I never subscribed to any threads, but I always get emails saying what threads I posted in that have responses, or if I have a PM. Jason, is that the same as subscribing?

Posted May 09, 2009 · 21:56 UTC#8

Jason,

 

I was hit by this guy yesterday on another forum that I am on.

 

You don't have to worry about whether he got to your admin controls, the way he works is he signs up for a forum by hand, then once he is signed in he uses a bot to mail-bomb the forum's memberlist.php page.

 

Check your PMs.