Page 1 of 1

Forum infected by spammers / hackers

Posted: Fri May 24, 2019 6:20 pm
by ramon zarat
Hi,

Just got an e-mail saying I just won something and to click on a suspicious link by user Wb4_kzj6_. This user registered on may 24, never posted a single time, and now PM people (I'm assuming a lot more than just me), which send an email notification, with the suspicious link to claim a prize (link on both the email notification an the PM message). I also noticed a bunch of strange user names currently logged in as I write this:

_m2bdl5h
O_d29wgge
Y7ur_asr2

All 4 have registered on may 24 within a few minutes of each other. You have been invaded folks.

Re: Forum infected by spammers / hackers

Posted: Fri May 24, 2019 6:49 pm
by thebaldconvict
Came here to give the same warning.

Re: Forum infected by spammers / hackers

Posted: Fri May 24, 2019 9:59 pm
by Cael
i just reported the PM's

Re: Forum infected by spammers / hackers

Posted: Sat May 25, 2019 1:00 am
by mrmajikbus45
I let xPhazer know.

Re: Forum infected by spammers / hackers

Posted: Sat May 25, 2019 3:04 am
by kolosus
I got a link and winning notification message from a mod. Heather9009. The infiltration is deep.
Same MO.

Re: Forum infected by spammers / hackers

Posted: Sat May 25, 2019 8:09 am
by iceman-uk
Same for me from "O_d29wgge"

DO NOT follow the link in the PM

I have let forum mod "Buzz" know.

We'll never know what it said...

Posted: Sat May 25, 2019 2:28 pm
by 2 Bunny
I completely forgot that this site even still existed until I received an "Important message from the forum administration!" Sadly, it wasn't meant to be, as the message was gone by the time I signed in.

Re: Forum infected by spammers / hackers

Posted: Wed May 29, 2019 11:55 am
by Coldly-Indifferent
Sounds ^ like the same sort of email I've been receiving and deleting usually without even opening - but I checked the most recent one and just like the first I'd received months ago it reported a new PM from some unknown XBMC4Xbox member sent by buzz exotica org uk. Apparently this purports to be the XBMC4Xbox forum informing me of such a messages as per my preference settings.

Obviously I did not click on the link provided (doh!) and when I came here direct there is no PM or notification and has not been since early March. Highly suspicious.

They tend to appear in my Inbox soon after the latest spamming attacks on the forum.

Can the real BuZz or one of the other admin please confirm one way or another whether these informational emails are genuine or not? If it is genuine my guess is that the PM was the dodgy thing and has been deleted by the forum admin but if that is the case why are we not being informed about that.

What is going on? Have our email addresses and been compromised?

Not that complicated

Posted: Thu May 30, 2019 11:23 pm
by 2 Bunny
Coldly-Indifferent wrote: Wed May 29, 2019 11:55 am What is going on? Have our email addresses and been compromised?
No. You got a notification of a new message. The account which sent the message has been deleted, so you no longer have the message.

Re: Forum infected by spammers / hackers

Posted: Fri May 31, 2019 1:08 am
by Coldly-Indifferent
Yes I get that and certainly it is not complicated :roll: but the question still has not been answered: is that buzz exotica org uk a genuine email notification from this forum or not? Confirmation of that is the main reason I posted.

Yeah, it's illegitimately legitimate

Posted: Fri May 31, 2019 1:11 am
by 2 Bunny
Coldly-Indifferent wrote: Fri May 31, 2019 1:08 am Yes I get that and certainly it is not complicated :roll: but the question still has not been answered: is that buzz exotica org uk a genuine email notification from this forum or not? Confirmation of that is the main reason I posted.
It's about as legitimate as the "xbmc4xbox.org.uk" domain, in my opinion. And yes, I can confirm that it was like that years ago back in the heyday of the forum. All of the notifications come from that email address. You might have even noticed it for notifications relating to this thread.

Re: Forum infected by spammers / hackers

Posted: Fri May 31, 2019 1:19 pm
by Coldly-Indifferent
Thank you.

Re: Forum infected by spammers / hackers

Posted: Wed Jun 05, 2019 12:37 pm
by Dan Dar3
Yes, it is the same Buzz (main developer) here.
* https://www.xbmc4xbox.org.uk/development/
* http://redmine.exotica.org.uk/projects/ ... repository
* https://redmine.exotica.org.uk/users/1

Exotica.org.uk is his domain where he is also hosting this forum website and SVN.
https://www.exotica.org.uk/