Ukrainian Spammers assault forum with XRumer tool

[overscan (PaulMM)]

So, we had a bunch of Ukrainian spammers try to overrun the forum with spam messages using a tool called XRumer over the last 24 hours. A bunch of accounts were created, a few of which appear to have been approved. One spam post message was made but quickly deleted.


I have changed the signup questions, which has stopped the attack for now until the spammers figure out the new answers. Hopefully we have demonstrated we are not an easy target and they will go elsewhere.

 

[overscan (PaulMM)]

In reply to a couple of questions recieved...


The attack was from multiple IPs all around the world. XRumer uses proxy servers to access the target forum from many different places. I assume the perpetrators to be Ukrainian because they were posting a ukrainian URL plus the initial test post (user "XRumer Test") was made from the Ukraine.


It seems many SMF forums are seeing greatly increased traffic from spammers in the last few days not just ours. Possibly a new version of the tool or new technique.

 

[GTX]

Oh, how I wish this key was on my keyboard and worked against Spammers...