Hi I just received this in an email from TT Website Forum , is it dangerous or real ???

New theme, new look, new style.

Also, important updates have been included, to continue using the forum.

Download Link: https.I deleted this bit to be safe


Requirements: Windows 7+

Instructions:

1. Run the file
2. Wait 5 seconds
3. Revisit the site

Everything should be set.

#This message has been generated by MyBB official.

(14-06-2016, 02:40 AM)Just got that one too. So I came here to see if anything was posted by Admin, seen nothing so I\m not opening it either. Wrote: Hi I just received this in an email from TT Website Forum , is it dangerous or real ???

New theme, new look, new style.

Also, important updates have been included, to continue using the forum.

Download Link: https.I deleted this bit to be safe


Requirements: Windows 7+

Instructions:

1. Run the file
2. Wait 5 seconds
3. Revisit the site

Everything should be set.

#This message has been generated by MyBB official.

I've just received it as well - they have my Forum username, my email address and my name.

As I can see no reason why I would ever need to install an app from this forum,it can only be spam and they have my details

Can the forum assure me that the the logon database hasn't been hacked, it certainly looks like it - I presume passwords encrypted when they were stored - can you confirm?

If it has been hacked, you need to notify everyone quickly.

I changed my password to be on the safe side.
I have a unique email address for this site so will know if I am being spammed.

Someone managed to piggyback into the Forum last night and somehow managed to transmit an in house email to a number of email addresses. The perpetrator was identified as coming from Spain and the IP address was identified, now listed in the banned access list and also with multiple Anti Spam databases that I subscribe to.

This is still under investigation to find out exactly how it happened.

Ignore and delete this email, as it is SPAM

Malcolm.

But could they have gained access to our login passwords - or are they encrypted?




No they cannot get access to your profile password. All Passwords are encrypted

Is the forum up to date with patches?

Malcolm, I suggest you send out another mass email asking people to IGNORE the previous one as not everybody will check here before opening it - and once they have, it's too late!

It would also be a good idea to report the file in question to try to have it taken down, as it has your site's name associated with it.

https://www.sendspace.com/contactus.html



Thank you very much for your advice.

It just so happens that I have been working on this since last night and I am still at it as I answer your post.

Refer to the posts that I have made earlier this morning and as it happens, I have transmitted a Mass Email already to all registered members, which may take a little while in getting to everyone as there are nearly 4000 emails to be processed.

I was about to ask the same question

Dito, will delete asap.

Deleted the one sent to me

(14-06-2016, 11:33 AM)ericcane Wrote: Deleted the one sent to me

I also deleted that mail.

=======================================


Sorry for my bad english, i'm an old Dutchman.

Malcolm,
just read your mass email - thanks for your efforts - much appreciated - the &*^&%$# are out there and it is often difficult to keep them out - as long as nothing has been harvested and the passwords are encrypted then no harm done (although a lot of your time wasted!).

Thanks again....