VLC Forum Hacked? and etrade phishing attack

[usera]

I posted this in the videolan subforum and it was deleted instead of moved to here I guess.

Anyway I posted here cause my original post was deleted instead of being addressed. Which is my email that's used for videolan forum and only videolan forum was just sent an etrade phishing much like those ebay emails and obviously it seems the forum was hacked or somehow the email addresses are leaked. Since my original topic was deleted instead of addressed which should be addressed I'm posting again hoping for a more appropriate response since this needs to be made public instead of hiding it.

[dionoea]

As i just said in the private message i sent you, i deleted your post while cleaning up spam on the forum (which can be quite hazardous). My initial answer was: http://altair.videolan.org/~xtophe/Capture-3.png .

If you have proof about what your are saying, please send it to me so we can fix any issue we have.

[dionoea]

Looking at these messages ... it looks like the "email" button provides the user's real email address (which is weird ... i though that it wasn't supposed to). We updated to latest phpBB 1 or 2 weeks ago which might match the date when you began to receive the spam. I'll try to see why this email button is working while the email isn't available in the profile view.

[dionoea]

Another likely explanation is that you answered yes to "Always show my e-mail address" in your profile. If that is the case, please say so so i can stop being afraid that phpBB got all messed up

[HyperHacker]

Apparently some other phpBBs got hacked a while back through some new exploit, and the emails were stolen.

[Jean-Baptiste Kempf]

This one is up to date, and hasn't been. Not that time.