*
*
Home
Help
Login
Register
Welcome, Guest. Please login or register.
October 25, 2014, 09:08:27 PM

Login with username, password and session length
Forum changes: Editing of posts has been turned off until further notice.
Search:     Advanced search
46709 Posts in 5588 Topics by 13297 Members Latest Member: - Shane786 Most online today: 27 - most online ever: 429 (November 03, 2007, 04:35:43 AM)
Pages: [1] 2
Print
Author Topic: Weird spam with forge related addresses?  (Read 8011 times)
Callan S.
Member

Posts: 4268


WWW
« on: September 27, 2010, 06:30:18 PM »

This is odd - I'm getting hundreds of spam e-mails. But the 'To' field has a few names I'm familiar with. I wont say the full e-mail addies, but stuff like sorcerer, lumpley, dindenver, moreno, greyorm, etc at the start and even my own e-mail. This looks like a forge list of e-mails? When the forge was hack crashed awhile back, could someone have simply copied all the e-mail addies as well?

I'm not tech savvy, so I don't know why if they are 'to' these other addresses, they are going to me.

Strange.
Logged

Lance D. Allen
Member

Posts: 1970


WWW
« Reply #1 on: September 27, 2010, 09:08:05 PM »

I did suddenly start getting a massive amount of spam e-mails myself just this morning, but I didn't recognize any of the addresses.
Logged

~Lance Allen
Wolves Den Publishing
Eternally Incipient Publisher of Mage Blade, ReCoil and Rats in the Walls
masqueradeball
Member

Posts: 346


WWW
« Reply #2 on: September 28, 2010, 12:01:08 AM »

ditto
Logged

Sander
Registree

Posts: 2


WWW
« Reply #3 on: September 28, 2010, 10:00:16 PM »

I registered here many years ago with an email address unique to this site, and am now starting to get spam to that unique email address. It looks like the forum database has been compromised. This has been happening quite a lot with various forums over the last year. I'd recommend forum admins to update the forum software to the latest version, use stronger passwords for admin access, and ideally to find out exactly how this happened.
Logged

lumpley
Administrator
Member
*
Posts: 3656


WWW
« Reply #4 on: September 29, 2010, 03:48:40 AM »

Thanks for the heads-up. I'm on it.

-Vincent
site admin
Logged
Christoph Boeckle
Member

Posts: 545

Yverdon, Switzerland


WWW
« Reply #5 on: October 01, 2010, 01:45:25 AM »

Hi

I was receiving tons of that spam as well on my yahoo account (which is the address given with my Forge account). A recurring pattern in the email subject was "RE:" followed by a single funny character (scientific symbols for male and female, stars, smiley, etc.) Since one or two days I'm not getting these mails any more.
Logged

Regards,
Christoph
lumpley
Administrator
Member
*
Posts: 3656


WWW
« Reply #6 on: October 01, 2010, 04:23:36 AM »

Could you all check something for me? Up at the top of the screen, hit "profile," then on the left hit "account related settings." There's an option called "hide email address from public?"

While you've been receiving this spam, has your email address been hidden from the public?

Thanks!

-Vincent
Logged
David Artman
Member

Posts: 606

Designer & Producer


WWW
« Reply #7 on: October 01, 2010, 07:28:04 AM »

I have not hidden the email from public (but I have changed its redirect to head to  my spam account).

What would the email accomplish if hidden? Let's the forum and admins notify us?
Logged

Designer - GLASS, Icehouse Games
Editor - Perfect, Passages
lumpley
Administrator
Member
*
Posts: 3656


WWW
« Reply #8 on: October 01, 2010, 07:42:55 AM »

Yes.

As far as I can tell, the database is secure. The spam is almost certainly just bots trawling users' profile pages.

-Vincent
Logged
Erik Weissengruber
Member

Posts: 601

Designing "In this Sign, Conquer:


WWW
« Reply #9 on: October 01, 2010, 08:12:56 AM »

Could you make a warning for new members to the site?

Or why not disable the option of having public emails entirely?
Logged
lumpley
Administrator
Member
*
Posts: 3656


WWW
« Reply #10 on: October 01, 2010, 08:19:20 AM »

Unfortunately, SMF doesn't provide the option to by-default hide users' emails. I might be able to modify the template to take it out.

A warning is a good idea.

-Vincent
Logged
C. Edwards
Member

Posts: 589

savage / sublime


« Reply #11 on: October 01, 2010, 12:26:57 PM »

Hey Vincent,

I was receiving the spam as well, and my email address is hidden.
Logged
Callan S.
Member

Posts: 4268


WWW
« Reply #12 on: October 02, 2010, 11:09:53 PM »

Mine is checked to hidden as well, and as said, I got the e-mails.
Logged

lumpley
Administrator
Member
*
Posts: 3656


WWW
« Reply #13 on: October 03, 2010, 05:50:10 AM »

Okay, thanks. I'll keep looking.

-Vincent
Logged
Callan S.
Member

Posts: 4268


WWW
« Reply #14 on: October 03, 2010, 04:57:47 PM »

I should have mentioned, I stopped recieving mine around the time Christoph's stopped as well. Just in case I gave the impression that I was still getting them.
Logged

Pages: [1] 2
Print
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Oxygen design by Bloc
Valid XHTML 1.0! Valid CSS!