Recent Events, Account Security and Protecting Yourself - Official Message

[Wicked]

@OakleyBoss
I think it's time for more drastic action's to protect members of the forum. Can't you pull the plug on the whole site until a thorough investigation has taken place? If this carries on no-one will trust anyone and members will leave. I'm no IT bloke but this person seems to be able to access quite a few accounts, including MODERATOR.
Also why can't we see waveclouds posts any of them?

Maybe he blocked you.

 

[jim881]

Maybe he blocked you.

That's what I'm saying pal.....who know who is who now.

 

[OakleyBoss]

@OakleyBoss and Mods

We can prevent these such scammers in here by:

1. Educate all the users (everyone) by changing their password and enable 2-factor authentication method. This is not enabled by default. To do this, you need to go to your Profile - > Security and Pasword and Enable 2-Factor. Note, it is much safer to use the mobile app than email for obtaining the code, email can easily get compromised, unless your phone got stolen.
2. Be vigilant and know who you're dealing with. If the person you are dealing with here sounds aint too good to be true then report them to the admin here.

If you want to catch this morons, log an incident case and engage with the Web site hosting provider of this forum to investigate the logs from their database and web servers. This can easily be tracked, they will only ask you of the thread and time window of the incident and they can trace these morons ip address location world wide. Trust me I know what I am saying as I work in the IT Security industry for years! If you need any help let me know. I can assist you.

100% agree on all of these points!

The IPs are all logged and we are already a part of several spam databases. We’ve already seen the IP change with each account and from looking at the databases they are all recently being reported for forum spam on other sites. So unfortunately we’re not alone here. Already have banned them here and working with our ISP/host to trace back and identify this guy!!

 

[TheStig]

hopefully mines doesn’t get axed. If i started selling R1s you know it aint me. If i start selling frogs for like 600 each well maybe @Wicked hacked into my account

What about Penny lenses?

 

[OakleyBoss]

Will be sending a site wide email and PM to enable 2FA / change your password if old/ reused as well.

 

[fredam2008]

100% agree on all of these points!

The IPs are all logged and we are already a part of several spam databases. We’ve already seen the IP change with each account and from looking at the databases they are all recently being reported for forum spam on other sites. So unfortunately we’re not alone here. Already have banned them here and working with our ISP/host to trace back and identify this guy!!

Thats good, if you ever find the country location of these spammers (talking here more than 2 morons) to be in the same location, ask the ISP/web hosting to geo block the country, but hopefully none of our members live there, otherwise they will get blocked too. This is a matter of Shared Security Responsibility to everyone, not only the Web Hosting or ISP but ofcourse with every users. So I suggest everyone should reset their password/turn on their 2-factor authentication with their mobile and be vigilant, with these approach we can counter those terrorist spammers

 

[wari210]

Can you publicise what the PayPal F & F email account was used? or were they different???

I can do this. I am not sure if it was always the same account. Do this in the forum may cause problems, but in case someone is collecting the information I am more than happy to support.

 

[OakleyBoss]

I can do this. I am not sure if it was always the same account. Do this in the forum may cause problems, but in case someone is collecting the information I am more than happy to support.

Feel free to PM me with the info. Compiling all the info to send to the authorities.

 

[GH4AU]

It appears GH4AU was either drinking heavily or had a security issue. I have put a temp ban on that member until things can be sorted out.

I have also put a temp ban on Wavecloud as a precaution. At the time, I was unsure who was possibly compromised and took action to protect the rest of the community. If any one has outside communication with either of these members, please let them know.

Thanks @Ecko. My account was hacked and it appears that 2 sales threads were posted by the hacker. @OakleyBoss sent me a password reset link and I have restored my account access. If anyone received any messages from me last night please disregard them. That was for sure not me.

 

[wari210]

Feel free to PM me with the info. Compiling all the info to send to the authorities.

Pm sent