HACKED ACCOUNTS?

[Boru13]

Are these hackers going after accounts with ton of good feedback but are also inactive?

No, the majority of the hacked accounts are from active members.

 

[Dadpool]

It’s safe to assume that all these too good to be true listings are scams.

A rule of thumb that never goes out of style.

 

[Docscoot]

A rule of thumb that never goes out of style.

So true, the hacked account ads I’ve seen have all been prices that were simply too good to be true, like a special edition premium steel PM2 for $115, things like that. Use your common sense and it cuts the risk at least a tiny bit.

 

[karnaknives]

At this point ALL for sale ads are suspect.
Let the buyer beware.

 

[AbjectTestament]

Boru13 I'm not sure if this is allowed or not but I tagged you just in case it's not and I need to delete it.


Avast has a pretty good free online checker to see if the email address you used for various sites had its password leaked. They should send you an email as well with a bit of information such as the date it was compromised and what information was taken.

Did your password leak online? | Check Your Email & Password | Avast

Search data breaches to see if your email and passwords were leaked. Stay one step ahead of the hackers and protect your identity with alerts.

www.avast.com

 

[knarfeng]

Boru13 I'm not sure if this is allowed or not but I tagged you just in case it's not and I need to delete it.


Avast has a pretty good free online checker to see if the email address you used for various sites had its password leaked. They should send you an email as well with a bit of information such as the date it was compromised and what information was taken.

Did your password leak online? | Check Your Email & Password | Avast

Search data breaches to see if your email and passwords were leaked. Stay one step ahead of the hackers and protect your identity with alerts.

www.avast.com

I use this one:

Have I Been Pwned: Check if your email has been compromised in a data breach

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

haveibeenpwned.com

 

[Dadpool]

One common thread I've seen in the recent hacked accounts (based on checking threads in the Exchange whenever I see one with a "hacked account" title) is that they tend to be longtime members with relatively few posts. I don't think it's a huge leap to guess that those are folks who haven't visited much, if at all, in recent years, and who perhaps picked an insecure password a decade ago. Of course hacked accounts also tend to limit access to their profiles -- but I bet mods can still see when they last logged in prior to the attempted scam sale(s).

I wonder if there's merit in some sort of "soft" account suspension after X years without logging into the site? Maybe move accounts like to an inactive state, easily reactivated with a password change and confirmation email upon next login. No idea if that's a pain in the butt with Xenforo, etc.

 

[karnaknives]

1. Force Log Out all accounts.
2. Require all accounts create new password at next log in.
3. Enable 2FA by default for all accounts.

Easy-Peasy.

 

[jeepin]

I just tried to change to the two step verification login setup and it was supposed to send me a one time verification code to my email which I never recieved.

I assumed it would arrive within a few minutes but is it possible to take longer?

 

[Boru13]

I just tried to change to the two step verification login setup and it was supposed to send me a one time verification code to my email which I never recieved.

I assumed it would arrive within a few minutes but is it possible to take longer?

Possible answer posted by B benchwarmer380

2FA Help

I tried to set up 2FA a couple times and when BF tried to send an email confirmation, I did not receive one. I checked spam, nothing there. Is the email actually being sent? I tried to do this awhile back also and got nothing. Thanks

www.bladeforums.com

 

[jeepin]

Possible answer posted by B benchwarmer380

2FA Help

I tried to set up 2FA a couple times and when BF tried to send an email confirmation, I did not receive one. I checked spam, nothing there. Is the email actually being sent? I tried to do this awhile back also and got nothing. Thanks

www.bladeforums.com

Dang. Thank you for the info, I will have to try another way.