Jump to content
This area is meant for questions related to WebFlake. If you post here for support with your site or how to emulate our site, your topic will be deleted.

Question We have discovered a phishing attack located on your network:


Kalota

Recommended Posts

Had a copy of IPB a while ago from here and something dodgy happened, 

Got a call form my server manager saying that the domain name is used to spam 

net/netflex-xxx/3D/master/flowGlobal_wflowCNCE_jsession_master.phpnet/

netflex-xxx/congratulations.php 

net/netflex-xxx/Warning.php?gnupg_verify=6c615f4299600600b1222c545a1fbc5c

 

And many more. 

How this could be possible?

Link to comment
Share on other sites

  • Tony locked this topic
21 hours ago, Kalota said:

Had a copy of IPB a while ago from here and something dodgy happened, 

Got a call form my server manager saying that the domain name is used to spam 

net/netflex-xxx/3D/master/flowGlobal_wflowCNCE_jsession_master.phpnet/

netflex-xxx/congratulations.php 

net/netflex-xxx/Warning.php?gnupg_verify=6c615f4299600600b1222c545a1fbc5c

 

And many more. 

How this could be possible?

I'm going to presume you posted in the wrong forum accidentally. What do those URLs have to do with anything?

Your mail server and/or your phpmail settings are not forcing external connections to authenticate. Or someone is spoofing your domain name but I'm guessing no one that uses this site is famous enough to be targeted.

Close any ports (Likely 25 or 143) that don't need to be open. Are you on a vps/dedicated or shared hosting? Shared hosting wouldn't allow you to remedy the situation in any way and you need to switch hosts.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
×
×
  • Create New...