At around 8:00 p.m. on August 28, a newly registered user named “weihu5d421416” posted the following message on the forum:
The so-called “test internal machine” is the content displayed at test.gczytxs.com. Visiting it brings up an interface like this. This login interface is actually a phishing page, intended to steal account credentials. The attacker used a failed backup as a pretext to lure administrators or other users into entering their account passwords on the phishing website. Once the attacker obtains these credentials, they can compromise the forum.
This account later sent another test message, and it has now been banned.
There have been several attacks on the forum recently. Please be careful when using your account password, and do not enter your account name or password elsewhere. The official website is currently www.wcjjws.com (pay attention to what is displayed in your browser’s address bar); you can also get there by redirecting from www.lsepcn.com.
At the same time, to prevent password leaks and protect the security of the forum, forum users are advised to change their passwords once. You can do so under “Preferences > Security > Send password reset email.”
