SMFHacks abused??

[Sarke]

I got this in my inbox today, saying I had a PM at SMFHacks.com but there isn't a PM, just the email notice.  When I use the link in the email to try to reply, it says the PM doesn't exist.  Anyways, here's the email.

From :  SMFHacks.com <>
Sent :  June 7, 2007 2:22:46 AM
To :  XXXXXXXXXXX@hotmail.com
Subject :  New Personal Message: From: Benjamin owus

You have just been sent a personal message by ben58 on SMFHacks.com.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

From: Benjamin owus

1/3 rue canal ave 6 Abidjan Cote d'Ivoire
Email :benjamin_o4u@yahoo.com
Pls do response via this email address : benjamin_o4u@yahoo.com


My dear,

Permit me to inform you of my desire of going into long term relationship and financial transaction for our mutual benefits hence I write with due respect .I am Benjamin Owus and I inherited a huge sum of money from my late father who died in this recent crisis in Cote d'Ivoire. I wish to request for your assistance in investing this money in a lucrative venture under your directives and guidance in your country. I want you to assist me for the transfer of this sum of Two million, five hundred thousand United States Dollars.($2.500,000)to your account designate hence I will give you the contact of the bank where the money is kept, so that you can contact them immediately and discuss with them since I do not know much about money transaction. I will give you some resonable percentage from the total sum for your assistance while I pray that you do not betray me at the end. Please it is important you contact me immediately for more clarifications on the next step hence it is my wish to relocate to your country as soon as this transaction is concluded.Pls do respond via this email address : benjamin_o4u@yahoo.com
God bless you.
Benjamin

Reply to this Personal Message here: http://www.smfhacks.com/index.php?action=pm;sa=send;f=inbox;pmsg=455;quote;u=1727

So what gives?  Someone seem to have found a way to exploit the email notice function from outside the site.


EDIT: Hmm... also weird.  I named the topic "SMFHacks I love SMF??" and now it's called "SMFHacks I love SMF??".  Can't change it back for some reason.  Trying something else...

EDIT2: There seems to be a word filter that changes h a c k e d (without the spaces) to "I love SMF".  Retarded...

[SMFHacks]

Yes someone did send a pm to a small amount of users and when I saw that it was deleted.
The h a c k e d filter was due to some turkish people registering long usernames with those words and making lots of posts with that text that was a while back.

[stormlrd]

some ppl just cant help but want to be pain in the butts

[lord_lethris]

its always turkish hackers too....

We had 2 of our boards (both running different engines) H@cked to bits by the turkish hackers...  And seemingly there are alot of them, in different reagions.  No matter how up-to-date we kept the security, they always found a way to bring it down.

No offence to the rest of the law abiding turkish people, but it got to a point where we had to ban the entire of the Turkey country's IP ranges... we lost alot of good forumites that day  .