* SECURITY ALERT * Change your forum passwords and your email passwords

[Asta]

https://www.collectorfreaks.com/thr...um-passwords-and-your-email-passwords.247700/

There is a current hacking campaign that has affected accounts on this forum and elsewhere around the internet.

The hacker has accessed several accounts here in order to use them to post spam.


For safety it's recommended you change both your forum password and the password for your associated email.

 

[Itsawhatchamacallit]

So they're trying to access other accounts from the same email, hoping they use the same shared password?

 

[Asta]

So they're trying to access other accounts from the same email, hoping they use the same shared password?

It's just speculation at the moment how they're doing it. The supposition is that it's due to weak passwords, but there's a report that one account on another forum had a "strong password".

It's in this thread:

https://xenforo.com/community/threa...isting-accounts-with-no-need-to-login.211713/

Many of the reported cases are of dormant accounts being taken over. Ten accounts so far on this site have been hacked. Nine were dormant (not been accessed in a few years). However, one was currently active right up until the day before the hack.

For safety it's best to change your email password associated with the forum, and your forum password. We need to freeze the hacker out.

We're banning any account as soon as it's apparent that the genuine user is no longer in full control of it.


Since this happened I've read several reports of data leaks. The big one was Twitter, from where it's believed as many as 400 million accounts might have been compromised. It was first reported last December.

https://www.wired.com/story/twitter...the end,trove with duplicate entries removed.

 

[medicomsucks]

Sorry I'm an idiot but how do you change it? I use the desktop setting on my phone.

 

[Jay Virtual]

Sorry I'm an idiot but how do you change it? I use the desktop setting on my phone.

Just do it here:

https://www.collectorfreaks.com/account/security

 

[Asta]

Sorry I'm an idiot but how do you change it? I use the desktop setting on my phone.

Under the "Your account" heading there's a link that says, "Password and security"

 

[medicomsucks]

Just do it here:

https://www.collectorfreaks.com/account/security

Thanks!