Members' accounts being hacked

[SecondSight]

Hello, 🙂

I've had about 5 accounts recently which had been hacked :

- the accounts had been created with my country's IPs.

- these are old accounts (one was created for example in 2015).

- their last posts on my board is spam (the previous posts had been posted obviously by the board's users) and the corresponding IP is from a foreign country (Russia).

This made me first believe that the accounts' passwords were weak and that this is the reason why spammers managed to login and post their spam... So I decided to disable the "Automatically unlock locked accounts when failed login count is reset?" option first.

Are there other possible reasons for these accounts being hacked ?

Or is this something else, in your opinion ?

Thank you. 🙂

[Gary]

Hi @SecondSight,

We are aware of this occurring, but it is not an issue originating from Invision Community itself. The topic below will provide you with a lot more information as well as ways to help secure your community to mitigate this as much as possible.

[SecondSight]

Thank you 🙂

[Gary]

Any time!

Please don't hesitate to get in touch if you have any other questions or concerns.