advertisement
Forums

The Forum is sponsored by 
 

AAPL stock: Click Here

You are currently viewing the Tips and Deals forum
Just got email with one of my passwords
Posted by: CW2V
Date: April 29, 2020 04:18PM
Unfortunately, I'm not sure which one it's for (so many). Password was in title of email.

How deep should I got to change passwords? It's a weak one probably used for a forum (not this one) or something.

How do you think it was obtained?

AAAAuuuGGGHH!

CW2V



Edited 1 time(s). Last edit at 04/29/2020 04:19PM by CW2V.
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: mattkime
Date: April 29, 2020 04:40PM
Sites are hacked and the passwords are shared and basically floating around online.

>How deep should I got to change passwords?

Are you using a password manager? Are you using good passwords and two factor auth?



Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: CJsNvrUrly
Date: April 29, 2020 04:46PM
I received an email that included my account and routing numbers. Whaaat?




bunny smileyCentral VA
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: CW2V
Date: April 29, 2020 04:53PM
Quote
mattkime
Sites are hacked and the passwords are shared and basically floating around online.

>How deep should I got to change passwords?

Are you using a password manager? Are you using good passwords and two factor auth?

No password manager. Some passwords are weak for simple stuff like forums, others that may have links to $ are much better. Not using any two factor authorization.

If I clicked open the email does that send a response back to the sender as "read?" There was nothing else in the email, words or attachments.

CW2V
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: CW2V
Date: April 29, 2020 04:54PM
Quote
CJsNvrUrly
I received an email that included my account and routing numbers. Whaaat?

Random email from hotmail account. Email title was one of my (older) passwords.
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: Sarcany
Date: April 29, 2020 04:57PM
1. There have been a LOT of breaches. I get automated "blackmail" emails including a password that I used at Comcast a couple of decades ago -- and changed a couple of decades ago -- to make it look authentic. The account has not been compromised. My computer has not been compromised. But if I ever used that password elsewhere (I didn't) then any account that used the same password would have been compromised.

2. If you re-use the same password for multiple purposes/sites then change all of your passwords. If any of the accounts were tied into other accounts or were email accounts then potentially hackers and anyone who buys lists of compromised accounts from them now have access to all of your accounts.

3. Good time to invest in a password-manager like 1Password or LastPass to securely record all of your new and unique passwords.

4. Enter your email address at this site for a good indication of where your account info might have been harvested:
[haveibeenpwned.com]



Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: S. Pupp
Date: April 29, 2020 04:58PM
I've been getting emails listing my old Linked-In password from a few years ago.
Linked-In was hacked some time ago, so I wasn't surprised.
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: jdc
Date: April 29, 2020 05:04PM
I get them from time to time as well -- although its been months. I do have an identical password that Ive used on multiple sites from way way back when, and to this day havent changed.

Ive seen the "pwned" web site before. It flags Adobe, Dbox, evite and linkedin.

I know my adobe and DB passwords are different than the one I get the email for, no clue on the other.



----


Edited 999 time(s). Last edit at 12:08PM by jdc.
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: hal
Date: April 29, 2020 05:33PM
Never EVER got one of those spams... fwiw, I stopped creating new accounts of any kind on the net years ago if I could avoid it. Paying via paypal is one way I do it. Many of the deals listed here from fatwallet (or something like that) that goes to a tiny website I don't know (and doesn't accept paypal)... I do not take advantage of those.

Maybe unrelated... maybe not...
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: fauch
Date: April 29, 2020 06:24PM
My mother got an email like this with her actual password, threatening to share a "pr0n video" she was allegedly starring in if she did not send a certain sum of bitcoin to them... She changed her passwords and it seems they didn't do any actual damage. She had never even heard of "bit something" before this...

Looks like lazy scammers going for the low hanging fruit and not actually engaging in identity theft or malicious hacking (for now anyway). I mean they could have changed the password and ransomed the account, or used it for nefarious purposes but they didn't. Probably some script kiddies that bought a block of information from real hackers in a data breach and are trying to cash in....
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: Sarcany
Date: April 29, 2020 06:40PM
Quote
fauch
Looks like lazy scammers going for the low hanging fruit and not actually engaging in identity theft or malicious hacking (for now anyway). I mean they could have changed the password and ransomed the account, or used it for nefarious purposes but they didn't...

It means that the password is out and has been out for a long time if the script-kiddies and robo-mailers have it and any account that uses the same username or email address and password should be assumed to be compromised.



Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: fauch
Date: April 29, 2020 10:18PM
Quote
Sarcany
It means that the password is out and has been out for a long time if the script-kiddies and robo-mailers have it and any account that uses the same username or email address and password should be assumed to be compromised.
Indeed. She changed all of her passwords and my brother helped her set up two factor authentication where available...

I told her she really shouldn't use the same password for multiple sites but asking her to remember unique ones for everything is just not going to happen and I'm not sure a password manager is a viable option for her.
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: Don C
Date: April 29, 2020 11:17PM
I've gotten that e-mail twice in the last week but the password they reference is not one I have ever used.

Thanks for the pwnd site. It flagged an address from insightbb days which I have not used in a LONG time. I still get mail to that address even though it was supposed to be discontinued when Time-Warner took over insightbb.
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: RAMd®d
Date: April 30, 2020 05:10AM
Just got email with one of my passwords

I received an email that included my account and routing numbers. Whaaat?

I've been getting emails listing my old Linked-In password from a few years ago.

I've gotten that e-mail twice in the last week but the password they reference is not one I have ever used.



Somebody has to ask, so it may as well be me — what the fsck is the purpose of those emails?

What did they say/want?




When a good man is hurt,
all who would be called good
must suffer with him.

You and I have memories longer than the road that stretches out ahead.

There is no safety for honest men except
by believing all possible evil of evil men.

We don’t do focus groups. They just ensure that you don’t offend anyone, and produce bland inoffensive products. —Sir Jonathan Ive

Perfection is the enemy of progress. -Winston Churchill

-An armed society is a polite society.
And hope is a lousy defense.

You make me pull, I'll put you down.

Mister, that's a ten-gallon hat on a twenty-gallon head.

I *love* SIGs. It's Glocks I hate.
Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: Sarcany
Date: April 30, 2020 06:24AM
Quote
RAMd®d
Somebody has to ask, so it may as well be me — what the fsck is the purpose of those emails?

What did they say/want?

Bitcoin.

[www.hoax-slayer.net]



Options:  Reply • Quote
Re: Just got email with one of my passwords
Posted by: RAMd®d
Date: April 30, 2020 02:57PM
Ah, ok.

Thank you for the link.

I was aware of the previous blackmail scheme, but didn't know it was related to the 'password' variation, since the intent of this version wasn't mentioned.

This is just one more reason those to whom hold our data and passwords should be held criminally accountable for breaches.

Having a 26-character, nearly random password is of no value if a site stores them and our data in plain text or has poor security theirowndamnselves.

It's my own damn fault if someone stumbles on to PepperAnderson and PepperGomez as my goto passwords for all my financial accounts and devices.




When a good man is hurt,
all who would be called good
must suffer with him.

You and I have memories longer than the road that stretches out ahead.

There is no safety for honest men except
by believing all possible evil of evil men.

We don’t do focus groups. They just ensure that you don’t offend anyone, and produce bland inoffensive products. —Sir Jonathan Ive

Perfection is the enemy of progress. -Winston Churchill

-An armed society is a polite society.
And hope is a lousy defense.

You make me pull, I'll put you down.

Mister, that's a ten-gallon hat on a twenty-gallon head.

I *love* SIGs. It's Glocks I hate.
Options:  Reply • Quote
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 141
Record Number of Users: 186 on February 20, 2020
Record Number of Guests: 2330 on October 25, 2018