How safe from viruses and hackers am I when using the Milsurps.Com web site?

[GOVTMOD]

Possible breach.

I received an scam/phishing email with my user name and password to this site in the subject line. Threatening to "expose" me to my contact list. This is the only place I have used that username and PW combo so the info might be from here.

I've regularly do maintenance on my PC so I don't think I was the source you might want to check.

[Badger]

Not from here.

Let us know if there’s anything else we can do to help you.

Usually this happens as a result of Trojan Virus operating undetected in your personal PC.

[GOVTMOD]

It's happened twice on different PCs, one I've never used before, just after manual login to here.

[Badger]

I’m not disputing your results that you picked up a Trojan someplace in your travels, just your immediate conclusion that it’s a result of being a member on one of the documented safest gun sites for active virus protection on the Internet. Please reread the measures used at all levels to protect member security, right down to the Unix kernel operating and the Sucuri firewall which protects our members.

Please re-read the measures used here under Sucuri and how our inline virus protection system operates.

We have no way of validating your claims that you’ve never used the same name and password anywhere else on the Internet except here, so our 30,000+ members are left with a huge credibility question.

Anything is possible, but to avoid future unvalidated claims that we are running unsafe systems exploiting your username and password combination, we’d request you logout of our site and refrain from using in the future with any relationship to current account parameters.

We’ll give you a few days to gather up any research data you wish to save, then we’ll delete your account and all posts with embedded data.

In the meantime, we’ll examine system logs and other areas to see if we can help you in other ways.

Thank you for your cooperation

Regards
Doug

[Badger]

Member complaint follow up:

I placed a formal request with our systems engineering technical support team, to examine the feasibility of the poster’s claim.

Results as follows:

I've found nothing to indicate that there was any breach, it's most likely a compromise on his local machine that was harvesting credentials as he typed them via keylogger. This scam attempt is very common and utilizes bulk data dumps to target users on topics that the attacker believes a subject would not want disclosed. It's usually related to porn sites and/or pirate downloads.

There's a pretty big disconnect between the claim that it happened on multiple PCs and the concept of it being a breach of Milsurps. Recommended course of action for him would be to change all his passwords, and to get a quality AV package. If he's using Windows, keeping Windows Defender updated and running is a good start. Although most people don't LIKE doing this; enabling User Account Control in Windows goes a long way to stop harvesting of credentials by preventing applications from running with Administrator privileges without secondary confirmation/permission from the user. Most people find this a nuisance and turn it off, which isn't advised with the current climate of the Internet.