⚠️ IMPORTANT SECURITY NOTICE
Between 20 and 30 September 2026, the platform was subject to an unauthorized intrusion. An unauthorized individual gained access to the training platform’s server and installed software that enabled files to be read and visitors to be redirected to external websites.
The unauthorized individual may have accessed a database containing the following personal data:
- First and last name or username
- Email address
- Phone number
- Profile description
Passwords were stored exclusively as cryptographic hashes designed to be irreversible, which reduces the risk of them being directly read. However, the risk to account security cannot be entirely ruled out.
The main practical risk: you may receive messages from individuals impersonating the project organizers. Please exercise particular caution with messages, links, and requests for personal data or confidential information.
Actions taken: the administrator removed the malicious software, changed all authentication credentials, invalidated active sessions, and reported the incident to the relevant authorities.
What you should do: we recommend changing your password the next time you log in and remaining vigilant when receiving any communication claiming to be from the project.
Contact: [email protected]
What Happened?
On 20 September 2026, at 14:15 server time, an unauthorized individual gained the ability to write files to the website’s file upload directory.
This finding is based on server-side file modification timestamps.
The attacker followed a repeated pattern. First, they uploaded a small test file to check whether PHP code could be executed in a given directory. After confirming that it could, they uploaded a file that enabled arbitrary files to be transferred to the server.
This cycle was repeated four times, at the following times:
- 14:15
- 15:26
- 15:46
- 15:56
By 15:58, the attacker had deployed a remote server management tool in three locations, as well as a tool designed to restore the infection after removal. The latter was protected by a fixed token.