1. Hello Guest!

    Thank you for visiting the ClubRunner Community website, you can login using your ClubRunner account information by clicking the login link on the top of every page.
    Dismiss Notice

URGENT: Were we Hacked or Spoofed?

Discussion in 'General' started by Danielle Lum on Aug 2, 2022.

  1. Danielle Lum

    By:Danielle LumAug 2, 2022
    New Community Member

    Joined:
    Aug 2, 2022
    Messages:
    1
    Likes Received:
    0
    Gender:
    Female
    Location:
    Aiea, HI, United States of America
    The attached shows up in our Email Traffic report. We have not sent any emails out since July 26, but traffic is showing LOTS of activity. When I click on PREVIEW, the emails look very spammy and at least one is in Russian.

    What do we do? ClubRunner Support is really bad at getting back to us, so I hope this forum is a better way to get information and help.
     

    Attached Files:

  2. Cheryl Warren

    By:Cheryl WarrenAug 2, 2022
    Community Member

    Joined:
    Sep 11, 2017
    Messages:
    26
    Likes Received:
    8
    Gender:
    Female
    Occupation:
    Marketing Consultant
    Location:
    Marketing Consultant
    WOW! I really want to know what is going on too. Keep us posted please!
     
  3. Mats Håkanson

    By:Mats HåkansonAug 3, 2022
    Community Member
    Beta Tester

    Joined:
    Oct 4, 2019
    Messages:
    15
    Likes Received:
    6
    Gender:
    Male
    Occupation:
    Communications consultant
    Location:
    Communications consultant
    Hello, these are not records of sent emails from the club. The list shows public entries being made in your contact form. Someone, probably a robot, has filled in info on the public contact form on the club's website. CR has done what it is programmed to do and has sent the form content as an email to the officer in your club registered as receiver of this info, default is the secretary.
    Most open forms do get this kind of annoying attacks. It can be part of trying to find a way of get access to the site's source code, but as I know there is no way in through this form in ClubRunner.

    Best regards
    Mats Håkanson
    District Rotary Public Image Chair, District 2390, Sweden
    Executive Secretary, District 2390
    Member of Rotary’s ClubRunner User Group Sweden
    Second line support to all districts using ClubRunner in Sweden
    Proud member of Malmö RC, Sweden
     
    Cheryl Warren likes this.
  4. Zach

    By:ZachAug 3, 2022
    Moderator
    ClubRunner Team

    Joined:
    Jun 5, 2017
    Messages:
    553
    Likes Received:
    75
    Gender:
    Male
    Occupation:
    Product Specialist
    Location:
    ClubRunner
    Hello Everyone,

    Mats is mostly correct in this case. The club has a contact form on their homepage, and someone or something is filling it out to send emails to the club. There is a captcha on the form, and we do have other bot and misuse prevention tools to help deter these types of events, but no protection is perfect in these cases. Anytime someone uses an accounts contact form, a record is added into the email traffic report, as this is a report of 99% of all of the email that the account generates.


    I was able to review the content of the emails sent through your contact form and have added some additional rules to the system to help protect your club's account and all customers on the platform.

    I hope this helps!

    Please let us know if the issue persists, thanks!
     
Top