开云体育

A member of my small, closed Groups.io art guild is concerned that our Group might have been hacked.? She has been getting messages on Facebook referencing her photos on Groups.io.? I personally try to avoid Facebook so I'm not quite sure if this needs investigation on behalf of our Group or if the member is simply getting random phishing messages.? Is anyone familiar with this issue?? I think I read somewhere that one can sign into Groups.io via Facebook?

I have advised the member for now to change Groups.io as well as Facebook passwords and if it is possible to sign in to Groups via Facebook to immediately discontinue.? Any other advice?

Maureen

On Sun, Aug 21, 2022 at 05:12 PM, Maureen wrote:

concerned that our Group might have been hacked

Not likely in my opinion.? It's much more likely that the member used the same password for several accounts and one of them was either hacked or phished.? That could have given the bad actor access to all the accounts that used the same password.

If you don't have a restricted group (membership approval required), then anyone can join and just watch for messages or uploads by another member.? What they do with the information is their choice.

Yes, it's possible to sign in to Groups.io via FB (or Google), but each person sets that in their Groups.io account.? I don't use either for logging in, so minimal chance of a cross platform problem.

Duane
--
Lots of detailed information can be found in the Owners Manual and Members Manual.

Please let me know if I am understanding you correctly.? In your opinion it's unlikely that someone directly hacked our Groups.io site.? But, if someone has access to a member's password they would be able to access our site by posing as the member, right?? The group is not public, it is by invitation only.

On Sun, Aug 21, 2022 at 10:11 PM, Maureen wrote:

In your opinion it's unlikely that someone directly hacked our Groups.io site.? But, if someone has access to a member's password they would be able to access our site by posing as the member, right?

That would be correct.? Unless they have a key logger installed on the members device, changing the password should cut them off.? In most situations like this, it's the user end where the lack of security causes problems.? Using open Wi-Fi, using the same password on multiple accounts, or clicking on phishing links lead to mayhem.

Duane
--
Lots of detailed information can be found in the Owners Manual and Members Manual.