forum users hacked

[amine13420]

hi,

i'm having trouble with my forum using vbulletin 3.8.11

since yesterday every hour i'm having some post of spam sending link for a website who have malicous infection,

the users said me that they never clicked on these link, and when i checked ip adress from post with spam and ip adress from users are different, it mean that hacker have password and using the account to send malicious link,

i don't know if there is any patch for this version ?

i'm ready to pay for any dedicated help

thank's

[KFrancesco]

Hi,
I have the same problem, any news?

Thank's

[z3r0]

It's happening to all forum software and comment systems; it looks like somebody has a bot that is using details from data breaches to log into member accounts and post spam.

It's only been coming from a few IP addresses so far, so has been easy to block.

[Kaelon]

Considering the number of boards still using vBulletin 3.8.x, I would be surprised if someone doesn't identify the breach and provide a patch soon enough. Any updates from vBulletin Staff on this?

[Phillip]

Considering all of 3.8.x software is outdated and is no longer supported I would say, that's the problem.

[z3r0]

Considering the number of boards still using vBulletin 3.8.x, I would be surprised if someone doesn't identify the breach and provide a patch soon enough. Any updates from vBulletin Staff on this?

There is no breach, it's a bot using hacked credentials on all forum and comments software be it vb3/4/5, Xenforo, Wordpress, IPB etc

[amine13420]

we really need help from official devloper to make us a patch.

[Dead Eddie]

There's nothing to patch. The software wasn't hacked. The spammers have your users username/password from a breach of a different software.

Also, there's no official developers -- Vbulletin 3.X isn't getting anymore patches.

[amine13420]

we need a solution for this spammers ...

some pluggins or mods ....

[z3r0]

So far I've only seen it from 3 different IP's, just block the spammers IP for now.

[amine13420]

@z3r0

that's what i'm doing.

[TheLastSuperman]

Try steps 5 & 7 here:
https://forum.vbulletin.com/forum/vbulletin-3-8/vbulletin-3-8-questions-problems-and-troubleshooting/vbulletin-quick-tips-and-customizations/282536-how-to-reduce-spam-and-registration-bots