[2021-02-25] Private message spam, **NOT** hacked

You can. Get rid of Alexa. And your Google phone while you’re at it
:wink:

And thanks SB! Your effort is appreciated! :+1:

I got the same from Diane98. Deleted the PM and Blocked :+1:

No PMs from Diane, Chantal etc. What did I do wrong? :frowning:

The raunchy PM I received came from alisausa11. I deleted the PM and blocked the sender.

I agree there doesn’t appear to be any security risk. I see no reason to think anything was compromised.

This type of attack is (er, was) almost trivial to do. The site’s infrastructure was designed to make it easy to automate things without any special permissions. That’s fixed though, and it sounds like sb is looking into more long-term solutions.

As for the weird behavior when clicking one of the deleted messages, that’s an old issue which was unrelated to the spam. It only showed people their own messages. A little weird, but not a risk to security or privacy.

Yeah, I feel the same. No love for me. :cry: :wink:

That explains things OP. Thanks.

slmjim

You both joined BLF in 2019.

If the spambots started with user #1, and then went up from there, maybe they didn't get to BLF members that joined in the last couple of years.

It looks like they didn’t go in order, I’ve received PMs from several users that got spammed in the 30,000 - 33,000 user ID range.

No, that bit isn’t correct TK. I can see everyone’s messages who replied to me too every message ever that is lol - hundreds of them, or did you mean that? sorry, unsure

Just to be transparent, I removed the previous two threads that started discussing this issue before this official one. It’s not an attempt to hide anything, but rather there was a lot of speculation and wrong information in those threads regarding what had happened. Thanks very much to everyone here for their patience and understanding.

Right, all messages that were ever sent to you were getting dumped onto the screen when visiting an email notification link to a PM that no longer exists. So it’s not a privacy leak because they were the same messages that you had sent and received, just all in one big threadless glob.

Ah I see, sorry for the confusion.

Oh, okay.

I bet you've gotten more than your fair share of PMs today.

You could say that… :weary: :wink:

Thanks for your hard work and diligence, Mr. Admin.

Yep, if your forum is going to be run by a single administrator, it's beneficial to have someone that is capable (and friendly.)

My message was from Jasica11. I didn’t see where anybody else was contacted by her.
Maybe she was real? :smiley:

Anyone got a copy of the message so they can send it to me?

I feel so left out… :cry:

Don’t play the innocent, we all know it was you behind it. :stuck_out_tongue: