XF 2.2 Old users are becoming SPAM everyday !

[Sadiq6210]

Hello

Recently I upgraded our forum from 2.2.8 to latest version and I noticed that many old users are becoming SPAM everyday (5 to 10 old memberships are stolen everyday and posting spam threads). I can't see any relation between the upgrade and the issue, however, this is what happened. Is it a coincidence? Is this a new method of SPAM attacking to steal the users accounts instead of new registration? I mean I am moderating this forum since 2006, moved to Xenforo since 2015 and I didn't face something similar.

Currently I am trying to control the SPAM posts by banning many valuable old users everyday.
Anyone is facing same issue? and advise?

 

[Seeker-Smith]

Hello

Recently I upgraded our forum from 2.2.8 to latest version and I noticed that many old users are becoming SPAM everyday (5 to 10 old memberships are stolen everyday and posting spam threads). I can't see any relation between the upgrade and the issue, however, this is what happened. Is it a coincidence? Is this a new method of SPAM attacking to steal the users accounts instead of new registration? I mean I am moderating this forum since 2006, moved to Xenforo since 2015 and I didn't face something similar.

Currently I am trying to control the SPAM posts by banning many valuable old users everyday.
Anyone is facing same issue? and advise?

Why not use user batch update and "set user state" of old users to awaiting approval or email verification.

 

[Ozzy47]

@Ozzy47

Wouldn't the Login Spaminator take care of these logins?

Possibly, but they wouldn’t be security locked.

 

[Gsk8]

Having same problem. This is a first for me. Up to five "old" accounts spamming per day. This just started happening. No new addons.

 

[dethfire]

Yeah there are a lot of sleeper accounts over the years that get activated. I end up deleting users with 0 posts older than 3 months.

 

[Suzanne O]

You would think to go through all the accounts and make sure that they aren't hacked.

 

[Gsk8]

Anyone know what caused this?

 

[philmckrackon]

Anyone know what caused this?

Most likely this database breach.

Researcher uncovers one of the biggest password dumps in recent history

Roughly 25 million of the passwords have never been seen before by widely used service.

arstechnica.com

XF discussion:

Thread 'Increase in Spam from old accounts'

Feb 15, 2024

Hello everyone,

I've noticed an increase in spam from old accounts over the past few days. These are accounts that haven't posted on the forum for many years. All the spam is advertising "Top-notch Casual Dating".

After analyzing other forums, I've noticed the same thing happening there too. But the most interesting part is that these forums operate on different platforms.

XenForo - https://pika-network.net/threads/top-notch-sasual-dating-verified-maidens.390411/
Vbulletin - https://www.nissan-club.org/board/showthread.php?t=53559
Invision Community -...

• Dkf
• spam
• Replies: 14
• Forum: Off topic

• 

 

[Mouth]

[OzzModz] Security Lock Old Accounts

Feb 13, 2024

Stop spammers from using breached accounts

• Ozzy47
• Add-ons [2.x]

This free addon will prevent old breached accounts from logging in, https://xenforo.com/community/resources/ozzmodz-security-lock-old-accounts.9372/

Agreed.

[OzzModz] Security Lock Old Accounts

Feb 13, 2024

Stop spammers from using breached accounts

• Ozzy47
• Add-ons [2.x]

 

[Sadiq6210]

Is there a way to revert all the changes done by spam in the user profile and restore the previous user fields values? Any available Addon?

 

[FTL]

@Sadiq6210 this could kill your forum, so it might be worth you enabling 2FA. It can cause some people to be locked out, yes, but it will stop these breaches in their tracks.