TRExp

TR4 & TR4A Forum

Restoring legitimacy

Moss Motors
AutoShrine Sponsor
AutoShrine Sponsor
AutoShrine Sponsor
AutoShrine Sponsor

oldbagpipe Avatar
oldbagpipe Alec Buchan
Bellingham, WA, USA   USA
Skye (webmaster) has removed the following threat and hats off to him.

Stay diligent.

There are at least three posts on the Buy, Sell & Trade Forum which were very suspect, and since have been removed.
http://www.triumphexp.com/phorum/read.php?5,1497821
http://www.triumphexp.com/phorum/read.php?5,1495454
http://www.triumphexp.com/phorum/read.php?5,149641



Edited 2 time(s). Last edit at 2017-11-27 02:14 PM by oldbagpipe.

. Hide banner ads & support this website by becoming a > Gold Supporting Member <
gozto11 Avatar
gozto11 Todd Bermudez
Cincinnati, Ohio, USA   USA
Yes and that begs the question, if the account was hacked, who else’s? Or the hacker changed the email on the account...surely the account owner receives notifications from replies to fake posts?? Again unless the hacker changed email

oldbagpipe Avatar
oldbagpipe Alec Buchan
Bellingham, WA, USA   USA
I think it would be a good thing if every user did a search of their own posts, just to see if in fact, they made the post, or some hacker is running wild.

For those who are not familiar with the search process:
Hit 'Search' at the top of the page
Hit 'Advanced Forum Search'
Type in your user name in the "Search by Member ID:
Highlight 'Search All Forums'
Hit 'Search Forum'

It will run a bit and then display all 'your' posts for the past year. If there is a post in your name, which you did not create, you've found a problem. Someone else is making trouble for you, and everybody who uses this site.

Just my $0.02 worth...

. Hide banner ads & support this website by becoming a > Gold Supporting Member <
Perdido Avatar
Perdido Gold Member Rut Rutledge
Tuscaloosa, Alabama, USA   USA
Alec,
Thanks for the heads up...I searched mine and all is good.
Rut

Reddragon Avatar
Reddragon Dale M
Chesapeake, Virginia, USA   USA
1963 Triumph TR4 "Road Runner"
1974 Triumph TR6 "Tweety"
Alec

Thanks for being vigilant, I"m good also.

Red

Skye Avatar
Skye Webmaster Skye Nott
Vancouver, BC, Canada   CAN
1964 Vespa VNB 125
1966 MG MGB "The Bomber RIP"
1983 Suzuki MC GS750E "Kate"
1986 Merkur XR4Ti "The Rally Car"    & more
Copying my comments from this BST topic. I don't think I've missed anything, and I'll be monitoring in case they try the same attack again.

http://www.triumphexp.com/phorum/read.php?5,1496413,1500163#msg-1500163

OK, I've completed my security sweep. It appears to be all one scammer operating out of Nigeria (surprise)

They are using a fairly complex proxy network to hide behind, but I found all their IPs and they are completely blocked from viewing this website now.

I found three compromised accounts, they have all been locked out and restored to their original owners. I've deleted or removed all of the "scam" posts. If anyone continues to PM those accounts, the messages will go to the legitimate owners, not the scammer.

However if you've exchanged email addresses or contacted the scammer through some other method than posting replies or PMs on this website, you should stop all contact immediately. All scam posts were at the beginning of this month, November 2017. I don't see any scam activity from those IPs in October.

I will continue to monitor the method they used to take control of accounts to ensure they don't try again.

Hard to tell how they got in. There doesn't seem to be any widespread intrusion, so I don't think it was a TriumphExp site hack.

Thanks,
Skye Nott



Webmaster, The Triumph Experience


Member Services:
Building the best online communities for auto enthusiasts
oldbagpipe Avatar
oldbagpipe Alec Buchan
Bellingham, WA, USA   USA
Well it didn't take long for the White TR4 (Oregon last time) to show up for sale on Craigslist again. Now its in Texas...
https://dallas.craigslist.org/dal/cto/d/1963-triumph-tr4-very-clean/6411438213.html

BE CAREFUL!

It was a scam here so I wouldn't expect it to have changed.



Edited 1 time(s). Last edit at 2017-12-05 11:09 PM by oldbagpipe.

. Hide banner ads & support this website by becoming a > Gold Supporting Member <

To add your reply, or post your own questions

Members Sign In   or   Create an Account

Registration is FREE and takes less than a minute!


Having trouble posting or changing forum settings?
Read the Forum Help (FAQ) or contact the webmaster