Phpbb 3.2.2 Packages Compromised

[TCH-Thomas]

This info are a few days old but I did not see it until now.

If you are using phpBB you should read this and see if you are affected...

 

Earlier today, we identified that the download URLs for two phpBB packages available on phpBB.com were redirecting to a server that did not belong to us. We immediately took down the links and launched an investigation.

The point of entry was a third-party site. Neither phpBB.com nor the phpBB software were exploited in this attack.

If you downloaded either the 3.2.2 full package or the 3.2.1 -> 3.2.2 automatic updater package between the hours of 12:02 PM UTC and 15:03 PM UTC on January 26th, you received an archive modified with a malicious payload.

 

Read more: phpbb.com/community/viewtopic.php?f=14&t=2456896

[TCH-Bruce]

Thanks Thomas

[TCH-Bala]

Thanks Thomas

[Head Guru]

The internet