Bot attempts to access forum account

[Denny]

I want to notice Epic and the community that there are bots trying to hack accounts on the forums. An hour ago I got a contact request on Skype that did not respond, so I blocked it. Short thereafter, someone is trying to log in to my account here on the forums with 5 failed attempts. Searching for the IP results in spam bot reports.

http://stopforumspam.com/ipcheck/50.7.143.60
http://botscout.com/ipcheck.htm?ip=50.7.143.60

So keep an eye out on your accounts and make sure to keep your passwords strong.

[Jamendxman3]

A few hours ago I had someone add me as a contact on Skype as well with no response, but I’m not aware of any attempts to hijack my account. My question is, how could the Skype request be related?

[Denny]

It’s not uncommon to try to get access to additional information to try to guess passwords. A lot of people use stupid passwords that are easy to find.

[anonymous_user_0df12f74]

Hey Denny,

Did you receive an email about the failed login attempts? If so please don’t delete it just yet in case we need to reference it later. Could you also please send me the IP in a PM? I will post it for Epic to look into tomorrow. Thanks! – EDIT: Nevermind the IP is right there, whoops. I’ll pass on the info!

If anyone else received an email please post here as well, we want to know if this is a one off attempt or something more.

[anonymous_user_f70d3582]

this is the second time I’ve heard this in the last week, check this thread for what to do:)

[anonymous_user_0df12f74]

@;325178

this is the second time I’ve heard this in the last week, check this thread for what to do:)

Thanks , added that link to the report.

So Denny, be sure to email them with this info at accounts@unrealengine.com, and I have sent Epic a note on the matter. Thanks!

[Denny]

I will send an email to Epic regarding this. Cheers.

[qdelpeche]

@;325394

All moderators and administrators should do a comprehensive scan and be wary of any weird links that might start floating around. Additionally, a number of my customer’s sites have been under a barrage of different attacks, including but not limited to, brute force. If I was someone trying very hard to get into an elevated account on a forum, I would try some sort of zero day browser attack, since moderators need to look at links and decide whether to remove them or not. In this case, I would examine any suspicious links through a sandbox, and perhaps activate a white-list for forum linking.

We are doing this and we are monitoring as closely as possible. The features you mentioned can only be enabled by Epic and the mods are currently discussing the matter with Epic.

[Ivey]

Hey all,

Alexander has brought it up to the team and we’re investigating. Feel free to hit us up if this escalates!

[anonymous_user_2abc45731 (anonymous_user_2abc4573)]

The forum has been acting slow lately… Could it be those little #^@^@ messing with it?