Account hacked on my forum and top poster deleted ... what can I do ?

ffmad

Hi,

Yesterday a user successfully got my account on my forum, and logged in and deleted the top posters and his messages. (including a topic with +10 000 messages ...)

Sadly the last backup is more than 1 month old, so I can't use it ... (now I know I should have a real backup every day at least -_-)

I would like to take some data from that save and put it back on the last version, what would you propose?

What can I put back without breaking anything ?

george_i

Just curious, how did an user got your account?

ffmad

@george_i said in Account hacked on my forum and top poster deleted ... what can I do ?:

Just curious, how did an user got your account?

that's the big question, I supposed he got my password by bruteforce, but even that is weird

george_i

@ffmad I'm new to NodeBB and I just want to make sure that is secure.

ffmad

@george_i said in Account hacked on my forum and top poster deleted ... what can I do ?:

@ffmad I'm new to NodeBB and I just want to make sure that is secure.

Be sure to set a limit of connection try per hour. Set a good password by default. Make people change their password.

You can do all that with NodeBB.

What happenned was my fault ...

FrankM

And use Two-Factor Authentication (2FA) .

ffmad

@FrankM said in Account hacked on my forum and top poster deleted ... what can I do ?:

And use Two-Factor Authentication (2FA) .

Great Idea