forum users hacked
 

hi,

i'm having trouble with my forum using vbulletin 3.8.11

since yesterday every hour i'm having some post of spam sending link for a website who have malicous infection,

the users said me that they never clicked on these link, and when i checked ip adress from post with spam and ip adress from users are different, it mean that hacker have password and using the account to send malicious link,

i don't know if there is any patch for this version ?

i'm ready to pay for any dedicated help

thank's

Hi,
I have the same problem, any news?

Thank's

It's happening to all forum software and comment systems; it looks like somebody has a bot that is using details from data breaches to log into member accounts and post spam.

It's only been coming from a few IP addresses so far, so has been easy to block.

Considering the number of boards still using vBulletin 3.8.x, I would be surprised if someone doesn't identify the breach and provide a patch soon enough. Any updates from vBulletin Staff on this?

Considering all of 3.8.x software is outdated and is no longer supported I would say, that's the problem.

There is no breach, it's a bot using hacked credentials on all forum and comments software be it vb3/4/5, Xenforo, Wordpress, IPB etc

we really need help from official devloper to make us a patch.

There's nothing to patch. The software wasn't hacked. The spammers have your users username/password from a breach of a different software.

Also, there's no official developers -- Vbulletin 3.X isn't getting anymore patches.

we need a solution for this spammers ...

some pluggins or mods ....

So far I've only seen it from 3 different IP's, just block the spammers IP for now.