Old users are becoming SPAM everyday

[tenis]

Everyday I have to delete spam posts by some old inactive users, suddenly reactivated from VPN IP.
First the user details are edited : ocupation/skype/about/website then it start posting spam links.
All the time the same ocupation and skype: mgHer / mgHerUF . See bellow an example:


I notice that 90% of those users have yahoo email, but there are some cases with gmail adress.
We recently migrated from vBulletin and we never had spam from old inactive users.

Any sugestions? The 2 steps verification will not be helpfull, there are over 12.000 members and most of them will not be able to login with this option enabled.

 

[Mr Lucky]

Any sugestions?

Set the old users not logged for months to need to reset their passwords via bulk update. If the account is hacked, it’s unlikely their email was also hacked so the hijacker will not be able to reset their passwords so cannot post

 

[zappaDPJ]

This thread might be of help:

Thread 'Spammers posting through existing accounts with no need to login?'

Jan 15, 2023

And, worse, with no need of stealing such account.

The fact is that since a week ago or so I am getting some spam messages posted by users with little or no activity, but registered years ago. All IP's are located next, and the message is tipically a link to a Telegram channel related to crypto.

It is not a flood, and actually doesn't pose a problem by now. The thing that seems scary is that it seems to avoid the pwd system. At least, the spammer doesn't leave track of having reset such pwd in the log...

Is anyone else experiencing this problem?

• Goldoff
• Replies: 228
• Forum: Forum management

• 

 

[jeb35]

This is has been happening for quite some time now. The original members account has been hacked by stealing their password. A few threads on here about that.

 

[AndyB]

Everyday I have to delete spam posts by some old inactive users, suddenly reactivated from VPN IP.

You might like this add-on:

https://xenforo.com/community/resources/security-lock-manager.9311/