28 replies to this topic

[Vinifera7]

I have been getting spam PMs recently. The first instance is described here. In the second instance, a user called jurdreda sent me a PM claiming to be from an administrator with a masked link, which I don't intend to follow.

This kind of thing has never happened to me in the 2+ years that I've been a member of Revora. What is going on?

[Caspa]

I'm not quite sure what's going on. I got the same PM from the same member, so I've suspended it's account.

[some_weirdGuy]

http://forums.revora...?showuser=17952

Seen as there is no 'report' button i can find from a pm page or on the user profile. They It sent a pm saying "From Administrator" and in the message it has a text link which says "Important! New Forum Rules!"

And it leads to the same site that the banned account muzrinkl pm'ed me a link to just a little while ago(its some site febl.ru, probably porn or something, i didn't open the link). So im guessing they are the same spambot/spammer

With all the admin changes and what not happening recently i'm not sure who to pm this to, so i just decided to make this topic.

Edited by some_weirdGuy, 13 April 2009 - 08:11 AM.

[Taralom]

Yes, i had the same message.
It read:

Important! New Forum Rules!

The only thing was that the link directed to somewhere that was not Revora, so I didn't click on it.

The only tip i can give is check it by holding your mouse over de link, and check in the lower left-corner where it leads to.

[shadowcreature]

Got same said PM.

[Banshee]

It seems that they are doing it with many random IPB forums.

We've followed the suggestion from Invision and the user was banned and the forum has PM flood control for specific member types. Let's hope it reduces this kind of thing.

[Daz]

I didn't get this here but I got it at Slipstream, someone must have set their bots to C&C community targeting mode.

[Banshee]

http://forums.invisi.....entry1794928"

PM Flood Control Patch for Invision Power Board 2.3.6 Released

We have received numerous reports from clients regarding spamming on the Personal Message (PM) system in IP.Board 2.3.6 and below. After consulting with reCaptcha (the provider of the captcha system in 2.3.6) we believe that humans are being used to bypass the captcha and then the newly created account is given to an automated script which sends PMs in huge quantities to your members.

The patch we have released today introduces a flood control setting to the PM system in IP.Board 2.3.6. This will limit how fast a member can send PMs thereby giving you and your moderators time to ban the offending account.

The download of 2.3.6 in the client area has been updated with this patch. If you already have 2.3.6 installed, you can download the patch along with instructions right in this topic. Applying the patch is quite easy but if you have questions feel free to contact support. If you would like support to apply the patch for you be sure to include your admin username and password, and if you are not an IPS hosting customer, your FTP details.


Upcoming IP.Board 3.0.0

IP.Board 3.0.0 contains this update already and new spam mitigation tools such as timed user group promotion. We are also exploring new centralized spam identification and banning services which we hope to have updates for you very soon!

[Bart]

we believe that humans are being used to bypass the captcha

For those wondering what is meant here: A lot of spammers use sites with free porn for this. They ask visitors to solve a captcha, after which they will get to see the porn. It's a nasty trick, but you have to give them credit for the inventiveness

[Caspa]

So for those of you wondering what to do in the mean time, and who to contact. Just PM whichever member of staff or admin is currently online. If none are on and it's before 11:00am GMT, just PM me.

[CIL]

I just got another!

We need to raise the difficulty for getting membership.

Edited by CIL, 13 April 2009 - 10:02 PM.

[Caspa]

Well a member name might help

[CIL]

My question is how are they entering the security code you have to type in to join?

[MT]

The second one now, this time it was along the lines of "New Forums Rules! From administrator".
Of course I deleted it without opening (is wouldn't be smart to open a message from a banned user), like the previous, but these really are getting annoying >.<

[Caspa]

The member names would be really useful right now. I know I'm good. I'm Caspa, but I'm not psychic.

[Abrams Tank]

Seen as there is no 'report' button i can find from a pm page or on the user profile. They It sent a pm saying "From Administrator" and in the message it has a text link which says "Important! New Forum Rules!"

And it leads to the same site that the banned account muzrinkl pm'ed me a link to just a little while ago(its some site febl.ru, probably porn or something, i didn't open the link). So im guessing they are the same spambot/spammer

With all the admin changes and what not happening recently i'm not sure who to pm this to, so i just decided to make this topic.

same here I haven't been on the site for a month and i'm getting crappy PM messages from banned users (especally this jurdreda)

I have the Important new forum rules one on my account what do you want me to do with it?

Edited by Abrams Tank, 14 April 2009 - 07:36 PM.

[Caspa]

forward them to me, and I'll take a look

Edit: Include the time, date and original sender name in the forwarded messages.

Edited by Caspa, 15 April 2009 - 02:03 AM.

[Abrams Tank]

PM you about it Note its pm not am. sorry.

[Lord Nikademis]

I got spam from the same as some_weirdguy did, this is what happened to Cannis, basically started out with spam PM, then it attacked threads started within the week.

[Caspa]

Unlike Cannis, we have semi-efficient, semi-humans running the place so we can nip it in the bud before it becomes too much of a problem. So far, the spammers mentioned in this thread have been dealt with. If more come from the same sites, I guess I'll just have to have fun and target the sites responsible.