To All PHPbb Forum Owners!!!!

[jeremy offline]

"phpBB mass-hack being prepared (FuntKlakow-bot)?- general countermeasures
During the last few days a bot using a name FuntKlakow, has been
registering to at least hundreds (maybe thousands) of phpBB forums.

http://www.google.com/search?hl=com&q=F ... tnG=Hae&me ta=

Bot is also capable for posting to forums:
http://forum.uebimiau.org/search.php?se ... =FuntKlako w
http://www.alternativ.ro/forum/search.p ... uthor=Funt Klakow

But most on most forums the bot keeps silent.

Ok, what is a danger?
Next time the phpBB announces a critical vulnerability, the bot would
have everything ready (just a post click away) from attacking
thousands of sites/forums.

Best defence against these kinds of bot-members, might be setting up
honeypot-forums, which the search engines can find but to which there
are no permanent links from the web. When new bot-members are
detected, such would be listed at each particular forum makers
homepage.

When a bot would then try to register to a forum, the forum program
would check the user/bot inputted user-name (or other characteristics)
and if those would match to those catched by a honeypot-forums,
registerin such user detais would be eliminated ( and possible IP
banned for some time)

Juuso Hukkanen"

[Overcaffeinated Sloth offline]

Didn't you already make a thread about this?

[jeremy offline]

Yes, I think this thread deserves to be double posted! ALOT OF PEOPLE ON THIS FORUM HAVE PHPBB FORUMS. I think they all have a right to know in fact I think this post should be stickied!

[Overcaffeinated Sloth offline]

Even thought it's breaking the rules?

But you can always ask Erynn to post this in Site news, where it could definately be stickied.

[Mewberries151]

I took care of it, Angelbolt. The one in Site Discussion has been locked.

Jeremy, regardless of your good intentions, posting a topic twice is still needless and spamish. People will see your topic. Believe me, forum owners that are at LF likely check Tech Discussion often.

Please don't make double topics though again, regardless of the situation or the intention. It is still spam and the action of creating spam completely negates the help you're trying to give.

The warning is appreciated but, please, don't double post, alright?

[Overcaffeinated Sloth offline]

KK!

But I still express my opinion, I feel this is very bad, and thank you for this, as I was thinking ofbecoming my own phpBB owner myself, but now i'm second guessing it.

[Evil Jeremy offline]

oh dear. one of my forums is already infected. i dont understand how to fix it. can someone please give me a better discription?

[jeremy offline]

Better fix that Evil!

I wont double post again, just trying to be a helpfull member

[Evil Jeremy offline]

but i dont understand the way to get rid of it at all! can somebody help me please? also, the bot-user said things like "I agree with that" and "couldnt of said it better". was it programed to say that?

[jeremy offline]

I would start by removing user FuntKlakow, then double checking your data base and removing anything associated with FuntKlakow

[darktemplar offline]

Can I just deny creating user with name FuntKlakow and prevent bot attack?