Sponsors Beware - very important security issue
 

There's a person using 65.92.106.37 ip who tries to change payment details using some malicious scripts.
We have 2 confirmed attacks by him at 2 separate programs (one NATS, one custom back-end). He probably somehow hacks sponsors admin and tries to change payment info.
Please beware
Contact me mrdeiz @ signbucks.com if you find a record into your logs

bump bump

Bump for this.

Out of curiosity, what were the two sponsors? And, did you get any email about the changes made?

Matyko has recently brought up how some NATS programs have the email confirmations turned off, making it easy for these type of changes to go unnoticed. https://gfy.com/showthread.php?t=1127211

If you have details about what the payment details are changed to, I would post those too in the hopes of exposing the individual for the thieving fuck they are.