Potential breach?

[Maa]

Hello,

I stumbled across a new account creating content after a long time, upon checking, I noticed that the account was unbanned by an administrator. The administrator uses 2-factor authentication etc.

I checked the user change logs and noticed that many banned accounts were unbanned. I am using v2.2.7 Patch 1.

Any ideas please? We have no issues server side.

Thank you.

 

[duderuud]

Check the ip from that user and the admin.
Also check the admin log...

 

[Maa]

I have checked the IP addresses and they belong to the user. It has also happened to my account, and I have 2FA enabled.

I've noticed it happens specifically after the terms are being accepted etc.

 

[webbouk]

Check your add-ons for any that have not been updated for a while.

 

[DarkGizmo]

sounds like it could be a compromised add-on.