XF 2.2 Users are getting hacked

[dtrumbower]

Currently on v2.2.6 Patch 2. The site I help with has had people at time get their accounts hacked and and the hacked user tries to sell items in our For Sale forum.
The last case happened this last Wed. The item was put up for sale at 1:25pm PST, but the logs show the password was changed at 5:30pm PST.

Anyone else had this issue on accounts?

 

[Wildcat Media]

I have an unpublished plugin from ozzmodz that alerts the Admin (me) when users make User Profile Edits - ie: change of location, website, etc. I have had users register and sit dormant, and their IP and user-entered profile information match (ie: India, Russia, Romania, etc), then return months later and change their location to Seattle, Atlanta, Denver, etc and start posting in Classifieds with scam attempts.

Nice! That would catch problem users in two different ways.

 

[Ozzy47]

I have an unpublished plugin from ozzmodz that alerts the Admin (me) when users make User Profile Edits - ie: change of location, website, etc. I have had users register and sit dormant, and their IP and user-entered profile information match (ie: India, Russia, Romania, etc), then return months later and change their location to Seattle, Atlanta, Denver, etc and start posting in Classifieds with scam attempts.

We’ll get this released soon.

 

[Suzanne O]

If people are getting hacked, send them an email telling them that there is some suspicious activity going on with their account and if it wasn't them to contact you directly.
Then you can ban the account.