Hello,

Digne d'un scénario  James Bond le résau IVAO piraté par un de ses propres membres :
Vérifiez donc si vos PW sont encore valables et dans le cas contraire demandez-en un nouveau.


Dear IVAO Members:
We informed all members that their passwords have been reset, as a security precaution to safeguard IVAO systems.
Through this release, now that we have the required additional information, we aim to now deliver additional details and clarity, as to the reason for our request.

In the moments leading up to the password resets, we were alerted to possible unauthorised use of privileged access to IVAO web systems. As a precaution,
we temporarily disabled the login to the IVAO websites for all users, including staff, until we were in the position to identify the root cause.

Suspicions arose when a member of the Executive Council removed an HQ Director without consultation with his colleagues.
Upon notification, the member of the Executive Council advised his colleagues that he did not execute the removal of this staff member.
This led to some tremendous confusion and concern.

Upon further examination, it was determined that the personal email addresses linked to some Executive members’ IVAO accounts had been changed to a temporary one,
and then changed back again in the space of around 30 seconds. This provided enough time for an individual to request a password reminder.
It is important to note that the changing of such email addresses of IVAO accounts cannot be done externally. In fact, IVAO systems audit every change to an IVAO profile,
which also includes relevant information about the staff member who actioned such changes.

Within a matter of time, the perpetrator was identified as an IVAO Staff Member who had misused their staff privileges to change email addresses on Senior Staff accounts,
attained their password, and then reset their email addresses back in order to stay unnoticed.

As a security precaution, we then made the decision to reset everyone’s password with immediate effect, and the staff member suspected to be involved in this incident, has been removed and suspended from the Network pending further investigation.
So far, this has only affected a limited number of senior staff accounts.
At this present moment, we still do not have any evidence that regular member accounts were targeted or affected.
As of now, services have resumed to normality and we fully understand the frustration that there was a need for members to request their new password.

Our Staff Members are working diligently around the clock to ensure members can continue to enjoy our virtual skies in a secure manner.

To regain access to IVAO Services, please use the following link to have your new credentials emailed to you:
https://www.ivao.aero/members/person/password.htm 
- In case you are experiencing any issues with your login process, please contact us at members@ivao.aero  and we will gladly assist you further.

Thanks for your understanding. Happy Flying and Controlling!

IVAO Headquarters