Hacked accounts?

User avatar
Vephriel
Illustrious Master Hunter
Illustrious Master Hunter
Posts: 16290
Joined: Wed Jan 06, 2010 8:07 pm
Realm: Wyrmrest Accord US
Gender: Female
Location: Canada

Hacked accounts?

Unread post by Vephriel »

There's been a recent trend of what look to be hacked accounts posting spam lately, from known or long-time users here. It's a little worrying and I'm wondering how they got access to those accounts. Is there anything we can do on our end to prevent this happening? I'm not sure if we should be changing passwords, or if there's any way the server people can pin down a source for the infiltration?

Just thought I'd make a thread to draw attention to it, thanks for any insight Wain!
User avatar
Maria
 Community Resource
 Community Resource
Posts: 18389
Joined: Mon Jan 11, 2010 2:19 am
Realm: Light EU Twintania/ Azol-Nerub EU
Gender: Female
Location: Copenhagen- Denmark

Re: Hacked accounts?

Unread post by Maria »

Thanks for making this Vephriel. I am quite worried too ..

Image

HUGE thanks to Makoes, Syleye, FeralClaw, Pingupuff, Karin,Bowno, Varethyn, Ashaine, Kishay, Aki (Täräin13), my friend Marie and some lovely ppl on Fligth Rising for my lovely sig

User avatar
Wain
The Insane
The Insane
Posts: 13333
Joined: Tue Jul 27, 2010 1:54 am
Gender: Male

Re: Hacked accounts?

Unread post by Wain »

Thanks for your reports! 🤍

It is a bit worrying! But unless I missed some, we've only had two long-term accounts hacked, I think. Or have there been more?

If they hacked our database I would have expected signs of many more accounts compromised. Assuming it's just been the two, it could be a situation where a virus or phishing tool is going around that (among other things) looks for your phpbb board account info. It's also possible a password list has been leaked, perhaps specifically related to boards, so if you use the same password for multiple boards I really, really suggest you change it now. But it's safest to change it regardless :)

I've let our sysadmin know, just to be safe, but I'm so far not worried that the hack is on our end.

Oh, and it looks like one of the two accounts hasn't been active here since 2021, so I deactivated her account. Not deleted or banned - it just means she needs to go through an activation process before she can use it again.
Shaman avatar by Spiritbinder.
User avatar
Maria
 Community Resource
 Community Resource
Posts: 18389
Joined: Mon Jan 11, 2010 2:19 am
Realm: Light EU Twintania/ Azol-Nerub EU
Gender: Female
Location: Copenhagen- Denmark

Re: Hacked accounts?

Unread post by Maria »

Only two yeah... but one of them had multiple posts..And im not sure they know about it? Saw them comment normally afterwards
Good to know you keep an eye out :hug:

Image

HUGE thanks to Makoes, Syleye, FeralClaw, Pingupuff, Karin,Bowno, Varethyn, Ashaine, Kishay, Aki (Täräin13), my friend Marie and some lovely ppl on Fligth Rising for my lovely sig

Post Reply