Unfortunately, I'm not sure which one it's for (so many). Password was in title of email.

How deep should I got to change passwords? It's a weak one probably used for a forum (not this one) or something.

How do you think it was obtained?

AAAAuuuGGGHH!

CW2V



Edited 1 time(s). Last edit at 04/29/2020 04:19PM by CW2V.

Sites are hacked and the passwords are shared and basically floating around online.

>How deep should I got to change passwords?

Are you using a password manager? Are you using good passwords and two factor auth?

---

I received an email that included my account and routing numbers. Whaaat?

---

Central VA

Quote
mattkime
Sites are hacked and the passwords are shared and basically floating around online.

>How deep should I got to change passwords?

Are you using a password manager? Are you using good passwords and two factor auth?

No password manager. Some passwords are weak for simple stuff like forums, others that may have links to $ are much better. Not using any two factor authorization.

If I clicked open the email does that send a response back to the sender as "read?" There was nothing else in the email, words or attachments.

CW2V

Quote
CJsNvrUrly
I received an email that included my account and routing numbers. Whaaat?

Random email from hotmail account. Email title was one of my (older) passwords.

1. There have been a LOT of breaches. I get automated "blackmail" emails including a password that I used at Comcast a couple of decades ago -- and changed a couple of decades ago -- to make it look authentic. The account has not been compromised. My computer has not been compromised. But if I ever used that password elsewhere (I didn't) then any account that used the same password would have been compromised.

2. If you re-use the same password for multiple purposes/sites then change all of your passwords. If any of the accounts were tied into other accounts or were email accounts then potentially hackers and anyone who buys lists of compromised accounts from them now have access to all of your accounts.

3. Good time to invest in a password-manager like 1Password or LastPass to securely record all of your new and unique passwords.

4. Enter your email address at this site for a good indication of where your account info might have been harvested:
[haveibeenpwned.com]

---

I've been getting emails listing my old Linked-In password from a few years ago.
Linked-In was hacked some time ago, so I wasn't surprised.

I get them from time to time as well -- although its been months. I do have an identical password that Ive used on multiple sites from way way back when, and to this day havent changed.

Ive seen the "pwned" web site before. It flags Adobe, Dbox, evite and linkedin.

I know my adobe and DB passwords are different than the one I get the email for, no clue on the other.

---

Edited 999 time(s). Last edit at 12:08PM by jdc.

Never EVER got one of those spams... fwiw, I stopped creating new accounts of any kind on the net years ago if I could avoid it. Paying via paypal is one way I do it. Many of the deals listed here from fatwallet (or something like that) that goes to a tiny website I don't know (and doesn't accept paypal)... I do not take advantage of those.

Maybe unrelated... maybe not...

My mother got an email like this with her actual password, threatening to share a "pr0n video" she was allegedly starring in if she did not send a certain sum of bitcoin to them... She changed her passwords and it seems they didn't do any actual damage. She had never even heard of "bit something" before this...

Looks like lazy scammers going for the low hanging fruit and not actually engaging in identity theft or malicious hacking (for now anyway). I mean they could have changed the password and ransomed the account, or used it for nefarious purposes but they didn't. Probably some script kiddies that bought a block of information from real hackers in a data breach and are trying to cash in....

Quote
fauch
Looks like lazy scammers going for the low hanging fruit and not actually engaging in identity theft or malicious hacking (for now anyway). I mean they could have changed the password and ransomed the account, or used it for nefarious purposes but they didn't...

It means that the password is out and has been out for a long time if the script-kiddies and robo-mailers have it and any account that uses the same username or email address and password should be assumed to be compromised.

---

Quote
Sarcany
It means that the password is out and has been out for a long time if the script-kiddies and robo-mailers have it and any account that uses the same username or email address and password should be assumed to be compromised.

Indeed. She changed all of her passwords and my brother helped her set up two factor authentication where available...

I told her she really shouldn't use the same password for multiple sites but asking her to remember unique ones for everything is just not going to happen and I'm not sure a password manager is a viable option for her.

I've gotten that e-mail twice in the last week but the password they reference is not one I have ever used.

Thanks for the pwnd site. It flagged an address from insightbb days which I have not used in a LONG time. I still get mail to that address even though it was supposed to be discontinued when Time-Warner took over insightbb.

Just got email with one of my passwords

I received an email that included my account and routing numbers. Whaaat?

I've been getting emails listing my old Linked-In password from a few years ago.

I've gotten that e-mail twice in the last week but the password they reference is not one I have ever used.


Somebody has to ask, so it may as well be me — what the fsck is the purpose of those emails?

What did they say/want?

---

I am that Masked Man.

All you can do, is all you can do.

There’s trouble — it's time to play the sound of my people.

Your boos mean nothing to me, I've seen what you cheer for.

Insisting on your rights without acknowledging your responsibilities isn’t freedom, it’s adolescence.

I've been to the edge of the map, and there be monsters.

We are a government of laws, not men.

Everybody counts or nobody counts.

When a good man is hurt,
all who would be called good
must suffer with him.

You and I have memories longer than the road that stretches out ahead.

There is no safety for honest men except
by believing all possible evil of evil men.

We don’t do focus groups. They just ensure that you don’t offend anyone, and produce bland inoffensive products. —Sir Jonathan Ive

An armed society is a polite society.
And hope is a lousy defense.

You make me pull, I'll put you down.

I *love* SIGs. It's Glocks I hate.

Quote
RAMd®d
Somebody has to ask, so it may as well be me — what the fsck is the purpose of those emails?

What did they say/want?

Bitcoin.

[www.hoax-slayer.net]

---

Ah, ok.

Thank you for the link.

I was aware of the previous blackmail scheme, but didn't know it was related to the 'password' variation, since the intent of this version wasn't mentioned.

This is just one more reason those to whom hold our data and passwords should be held criminally accountable for breaches.

Having a 26-character, nearly random password is of no value if a site stores them and our data in plain text or has poor security theirowndamnselves.

It's my own damn fault if someone stumbles on to PepperAnderson and PepperGomez as my goto passwords for all my financial accounts and devices.

---

I am that Masked Man.

All you can do, is all you can do.

There’s trouble — it's time to play the sound of my people.

Your boos mean nothing to me, I've seen what you cheer for.

Insisting on your rights without acknowledging your responsibilities isn’t freedom, it’s adolescence.

I've been to the edge of the map, and there be monsters.

We are a government of laws, not men.

Everybody counts or nobody counts.

When a good man is hurt,
all who would be called good
must suffer with him.

You and I have memories longer than the road that stretches out ahead.

There is no safety for honest men except
by believing all possible evil of evil men.

We don’t do focus groups. They just ensure that you don’t offend anyone, and produce bland inoffensive products. —Sir Jonathan Ive

An armed society is a polite society.
And hope is a lousy defense.

You make me pull, I'll put you down.

I *love* SIGs. It's Glocks I hate.