Hijacked Zombie Spammer Accounts

[TJ]

If you see any spam being posted by existing members, these accounts have been hijacked by spammers. I've noticed it four times in recent months. They might be linking e-mail addresses and passwords from data breaches. The only other way would be if they are guessing the password. It appears to be one spammer because the same link is being posted on the Games board. If the spammer happens to be reading this, your days are numbered bucko.

All new registered members are put into an awaiting moderation usergroup. I can filter out the spam that way.

I've changed these members passwords and moved them to the moderated usergroup. They will need to reset their passwords.

y2k3Joker - last posted 06-04-2018
rnd452 - last posted 07-18-2023
GordonQuid2002 - last posted 08-07-2022
um - last posted 12-12-2023

[Dude111]

I wonder how they are doing that???

Always something

[TJ]

The spammers are becoming more sophisticated and advanced these days. I think the most likely scenario is that he is guessing simple passwords. It seems like many people use "password" as their password.

Here are some of findings: 19% of respondents said they used “password” as their password. 52% use easily identifiable information in their passwords, such as company/brand names, well-known song lyrics, pet names, and names of loved ones.

https://bitwarden.com/blog/a-closer-...rd-statistics/

Two-thirds of Americans use the same password across multiple accounts. The most commonly used password is “123456.” 59% of US adults use birthdays or names in their passwords. 13% of Americans use the same password for every account.

https://explodingtopics.com/blog/password-stats

The spam activity is being discussed here.

https://www.phpbb.com/community/viewtopic.php?t=2651143

[Dude111]

I think they are doing whats going on ON EMD Todd.. They create the acct but dont spam for awhile... Once they get by the mod phase they begin............

Thats happend on EMD alot....... (emaildiscussions.com (VBB))

Check the IPs and see the the registering IP is the same as the current IP.....

Look at this idiot buddy.....

www.killermovies.com/forums/f29/t687433.html

I havent been to that VBB site in awhile and Ill tell ya something,its good he posted all this in the same thread!!