No announcement yet.

PM spammer

  • Filter
  • Time
  • Show
Clear All
new posts

  • PM spammer

    OK, here's a good one for ya.

    I got a new user who registered. Passed the 3.6.8 captcha AND an add-on spam preventer from

    She seems to have PM'd my ENTIRE board. BUT get this. She has ZERO sent PM's.

    So did she delete them all from her sent list or something? Can I delete all of these or what?

  • #2

    She perhaps exploited a security hole to mass privmsg users.

    I seriously recommend to check the access and error log files from your web server and mysql server and check for weird entries.

    Also, uninstall unofficial mods and re-upload the vBulletin files and check this thread for more security tips to prevent this.

    If you aren't using 3.6.8 PL2 yet, upgrade or patch.

    it's very strange she has 0 sent.. suspicious.


    • #3
      It could easily be possible to automate sending one at a time by iterating through the members list and having the automated send, send as if "Save a copy of this message in your Sent Items folder." is unchecked. (checked by default)


      • #4
        Indeed, despite anti spam addons a user can still manually register and wait a bit - make a post and then start spamming using a firefox addon or something.


        widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.