• Welcome to PS5Forum - The #1 PlayStation Forum. Why not take a minute to register for your own free account now? Registration is completely free and will enable the use of all site features including the ability to join in or create your own discussions.

PSA: Your Account.

Status
Not open for further replies.

Carlos

Owner
Staff member
I've been getting these old accounts coming back from their hiatus, only to spam. So far, I've seen about 3 or 4 incidents of this. This is NOT a security issue of the server. I always update my server to the latest version. Always. And this is NOT a software issue of the forum. I already spoke to the developers of xenForo. Their response was a flat out "NO."

YOUR accounts are sought out because of your dead e-mail account. If I see one wiff of your account spamming. I will start banning your account and locking any pathway for you to re-use the account to spam.

To be fair... I did purge the majority of accounts that have zero posts.

This is an administrative Public Service Announcement. You have been warned.

This applies to EVERYONE. Including moderators. Maintain your account(s) or face the ban. Thank you, and have a nice day.
 
To further reiterate what @Carlos meant by the comments above...
The most likely explanation and one that we see occasionally is that the email addresses and passwords are part of some historic breach of user accounts via various sources.

Ranging from various vBulletin and other forums up to major corporations like Adobe, many of these data breaches have made millions of username and password combinations publicly available to download. Due to the tendency for people to reuse their passwords across multiple online accounts this is unfortunately a common tactic for spammers and others to take over accounts.

Various websites exist which document such breaches and allows users to verify if a particular email address has ever been subject to a data breach.

https://haveibeenpwned.com is a very popular source.

My guess would be that those email addresses that have been compromised would be listed as being part of some data breach and the spammers have found the raw data which includes their password which may have been reused across multiple sites.

Obviously we cannot completely rule out any security issues but in similar, extremely rare cases, the weakness in security has been due to a server compromise rather than anything to do with the software.
 
Status
Not open for further replies.

Get Connected With PS5Forum.com

Like PS5 Forum!

Advertisements

Top