Hi,
I manage a realtively busy drupal site. Lately, i've been seeing a lot of spam activity (for a start I had to totally disable trackbacks).
Recently though, the spam has been looking quite odd, or structure. It usually manifests itself as a comment in the approval queue, looking something like:
2mild6 buesgzhyokxr, [url=http://jyvswlkywxmg.com/]jyvswlkywxmg[/url], [link=http://laxacmuxcxjz.com/]laxacmuxcxjz[/link], http://ljdtdhziiova.com/
The structure is always 5 characters, followed by 12 characters, and then some gibberish url, and link as shown above. The URLs are always gibberish, so I'm not sure what the goal is, perhaps a new spam sytem being tested.
Spam in the approval queue is fine, so long as it doesn't make it to the site, and it normally doesn't. However, over the weekend, a forum topic in the forum was somehow replaced with spam like I've included above. This is a very worrying thought. I can't figure out what user changed the node, and maybe the user had been using a simple password, but it is extremely worrying to see this happening.
I would love to hear if anyone else has experienced this, and what can be done, if anything.
