SOS. Nopcommerce message queue got hacked!!!

Posted: August 04, 2017 at 12:44 PM Quote #190893
Every minute, thousands of spam email were putting into my message queue!!!
I have shut down my email services connection, so they don't get sent out. I have changed my admin password, checked on the server for suspicious process..etc. I still see thousands of email pouring into my message queue and stuck there every minute.

Anyone has an idea where to look into? Many thanks!
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: August 04, 2017 at 1:01 PM Quote #190894
I got it resolved. It turned out a bot has been using Email Friend feature to send massive spam emails. I enabled captcha on Email Friend page and it stopped.

I would recommend you do the same just in case your site is the next target.
This post/answer is useful
1
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: August 05, 2017 at 2:10 AM Quote #190915
Talen wrote:
I got it resolved. It turned out a bot has been using Email Friend feature to send massive spam emails. I enabled captcha on Email Friend page and it stopped.

I would recommend you do the same just in case your site is the next target.


Thank you for sharing this! +1
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Pls up-vote the answer, if it helps you! :)

nopAccelerate - Faster, Reliable & Scalable nopCommerce
http://www.nopAccelerate.com/

nopCommerce Solution Partner
Microsoft Action Pack Partner

nopCommerce | Solr | Performance | Azure | BI | Analytics
Posted: November 08, 2017 at 8:41 PM Quote #195844
I'm in the same situation.  Where is Email friend page by the way.
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
http://www.snapnzip.com
Posted: November 08, 2017 at 8:44 PM Quote #195845
Found it
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
http://www.snapnzip.com
Premium support services
  • Dedicated premium support services provided by core developers are intended for persons who run mission critical websites, work on projects with tight deadlines, or want to get dedicated support.
Professional services
  • Want to open a new store? Want to take your store to the next level? Need a custom extension? We can customize nopCommerce to fit your store perfectly. Request a quote to get started.