Hi everyone,
This Sunday, a small number of existing, though mostly dormant, accounts were used to create a wave of spam posts.
Investigation so far points to this being a case of credential stuffing, where common or shared passwords - potentially taken from other websites - are used to brute-force access through automated means.
I have not found evidence that the forum, or the server that it runs on, has been compromised.
The affected accounts have been given password reset notices, and must also re-confirm their email. Site-wide, I have also flushed all logins so that all users must log in again.
As a precaution, please reset your password upon logging in. Use a unique password for this forum, and consider using your browser's password manager to auto-generate one.
I apologise for the disruption. Thank you for your attention and patience.
-chris
It looks like you're new here. If you want to get involved, click one of these buttons!