disturbing trend seen on new signups - targeted fields...

[JeffJ]

In the past few weeks I have seen a number of new members on my site with this URL or a minor variant of the URL as their home page:

pictures.hardcore-sex-1.net/067

I believe there's a trojan out there that targets forms that contain a field called "homepage" as is the case the the VB signup screen and automatically inserts this url when they press the submit button. I have contacted every one of these users and each confirms that they never entered a home page when signing up.

For the time being I am just going to change the form and the php code and use a different field name to avoid this.

Has anyone else seen this happen on their site? I have over 6,000 members on my site and my site is a little over two years old and this just started happening last month.

thanks in advance...

- jeff

[Floris]

Ask your members that experience this to update their antivirus definitions and run software like adaware.

Do you have image verification turned on? this helps prevent bots sign up.

[Freddie Bingham]

Yes, we have seen reports of this from other customers.