Pages: [1] :: one page |
|
Author |
Thread Statistics | Show CCP posts - 1 post(s) |
SamtheDog
|
Posted - 2006.01.10 01:40:00 -
[1]
Edited by: SamtheDog on 10/01/2006 01:45:45 Haven't checked my email for a few days..but I got this interesting tidbit in my inbox about 3 days ago. ___________________________________________
Dear A*** B****, samthedog
You account has been inactive for some time and we have as part of larger preventive security procedures reset your password to:
username: samthedog password: uybj5639
As this is being sent through unencrypted e-mail, wed like to ask you to proceed directly to our Account Management site (https://secure.eve-online.com/login.asp) and change your password again to an all new password. This is to further minimize the risk of security breach
We want to emphasize that we do not store credit card information, the only risk was concerning password usage and subsequent abuse of the accounts in question.
Remember: CCP will never ask you for your password.
We thank you for your patience in this matter and deeply apologize for the inconvenience this has caused. The EVE Support Team
________________________________________________
The funny thing is that samthedog isn't my login. I've never had any problems logging into eve with my current login/password but received this little email saying:
- my account was inactive (when 99% of us play nearly everyday) - my login is samthedog (which isn't...it's the name of one character I play in game with) - it's not difficult to fake a link from CCP about this. - why would CCP give us a new password when they say they would never ask for them? (seems strange)
This somewhat smells of a phishing ploy. I've petitioned CCP about this but have not yet received a reply. I will be calling them this evening (Asian time) to get a solid answer for you all.
The reason I'm suspicious is because I've had zero problems with my accounts. Nothing missing..was able to login (when they said it was reset). So what the email is claiming and what I'm experiencing don't match. I'm not unfamiliar with these emails. Anyone who uses paypal gets an email saying your info is about to expire & you need to update it NOW! ...are phishing scams. I'v never trusted these types of emails...was curious if they are legit or fake.
If I'm uninformed about anything....I'd love to know.
Cheers
Sam
|
Sardau Kar
|
Posted - 2006.01.10 01:42:00 -
[2]
I got the same thing,an account i never heard of and a randomly generated password.But when I reset it at webpage it indeed a new pass goes straight to mailbox,so it cant be fake.
I think they just handed the wrong account,as I can not login with that info on the page or the game either. -Free Mr.Fu,freeedom!11 |
Barack
|
Posted - 2006.01.10 01:48:00 -
[3]
Did you ever use a Trial Account with that Username ?
I have 2 old trial accounts, one I have recieved an email to reset password, I assume the other trial account will get a email also.
None had attachments, and all have had the correct username.
I would not trust that email, perhaps even save it and send to CCP through support page.
|
Void Dragon
|
Posted - 2006.01.10 01:49:00 -
[4]
I advise you just change your password again just to be sure.
|
Sardau Kar
|
Posted - 2006.01.10 01:49:00 -
[5]
No,been playing eve for over 2 years with my 2 chars and never touched a trial account.
-Free Mr.Fu,freeedom!11 |
|
Abdalion
|
Posted - 2006.01.10 01:52:00 -
[6]
Change your password and send an exploit petition please.
---
|
|
Cattraknoff
|
Posted - 2006.01.10 01:53:00 -
[7]
I got the same email, the password they gave me worked with my account, I logged in and switched immediately
|
Sardau Kar
|
Posted - 2006.01.10 01:59:00 -
[8]
I cant change anything due that I cant access the account,not even with the info provided in this mail.Username or password is wrong -Free Mr.Fu,freeedom!11 |
SamtheDog
|
Posted - 2006.01.10 02:02:00 -
[9]
I tried to login with the provided userid/pass but it failed. My regular account works perfectly. My feeling on this is that I used the beta accounts a few years back. When I tried to use my username..I couldn't..so I had to choose a different one..but I used the same email address.
Could that be it?
As it stands now..I'm going to keep my user id/pass since no problems have arisen & the provided info in the link do not work.
I'll contact CCP later & get a real world answer.... If it's just a snafu..then I'll pass it off as that & not worry about it.
Sam
|
Void Dragon
|
Posted - 2006.01.10 02:05:00 -
[10]
Originally by: Sardau Kar I cant change anything due that I cant access the account,not even with the info provided in this mail.Username or password is wrong
When they [ccp] send the eve mail they will put your login name as the one you login with not your charecter name.
My advice is just to change your password by doing the forgot password route if you cant access your account.
|
|
Sardau Kar
|
Posted - 2006.01.10 02:09:00 -
[11]
my user name in mail doesnt match neither my character name nor my login account..suspicious -Free Mr.Fu,freeedom!11 |
Sheriff Justice
|
Posted - 2006.01.10 02:11:00 -
[12]
I just received the same exact thing. Mine was for "Sheriff" though im obviously Sheriff Justice. PW already changed, petition already filed.
SJ
|
Sardau Kar
|
Posted - 2006.01.10 02:12:00 -
[13]
my account name wasnt anything remotely similar to my character name,which is MrFu
-Free Mr.Fu,freeedom!11 |
Arkanin
|
Posted - 2006.01.10 02:13:00 -
[14]
This does sound suspiciously like phishing. My advice would be that if you get an email like this suggesting you check on your password, type in the URL www.eve-online.com yourself and go to account management instead of following their link, which may lead to a phishing site.
|
Sardau Kar
|
Posted - 2006.01.10 02:16:00 -
[15]
The URL¦s match.Done it from the mail and then manually,its exactly the same link that leads you to ¦¦My account`` part of this same webpage. -Free Mr.Fu,freeedom!11 |
Sardau Kar
|
Posted - 2006.01.10 02:20:00 -
[16]
Well will a GM talk to me directly in game instead of keep me bouncing with mails about the extreme lag and sorry for inconveniences?this is getting ridiculous now -Free Mr.Fu,freeedom!11 |
Epsillon
|
Posted - 2006.01.10 02:28:00 -
[17]
I reckon we should try and guess his real name... I'm gonna go with, Andy Birch! _____________________ "They arent giggling about his spelling, they are giggling at the fact that he's a ******* moron" - DrunkenOne |
pshepherd
|
Posted - 2006.01.10 02:31:00 -
[18]
i got the same email about 2-3 days after i manually had to change my password. I just ignored it, since i could access eve and assumed that it was now out of date. the mail comes from the official support email address, so i doubt it was a fake.
============== This is a sig |
Hanns
|
Posted - 2006.01.10 02:36:00 -
[19]
i think its legit mail, i got one for my second account which is currently inactive.
|
Lord Artemis
|
Posted - 2006.01.10 02:38:00 -
[20]
I recieved the same mail and it worked just fine, tho i didnt catch it in my inbox, my email program filtered it as spam/junkmail ___________________________
Aegis Militia Diplomatic Relations Officer C.E.O. of SHOD
|
|
Girdan Keirge
|
Posted - 2006.01.10 03:13:00 -
[21]
It hasn't been pointed out how easy it is to fake a link. I've gotten tons of fake mails about ebay and paypal accounts with my username and a link to 'ebay' to change my pass. Thing is, it isn't ebay.
Right click the link and select 'copy link location' or whatever your browser says for copy link, then just paste it in the address bar of your browser and see if the actual link text in the mail is what the true link is.
It's pretty easy to copy a website and make it look just like the original.
The mail's you've gotten may be legitimate or they may not. Best way to make sure is do not use links from mails but use either a known good bookmark or physically type the address in the location box, which in this case would be 'www.eve-online.com', as we all know.
If you have even the slightest doubt that the email is legitimate, and based on your posting here, you do, go immediately to your account page and change your password.
If you did get spoofed, chances are that the thief has already changed the email address and any attempt to reset the password would go to their email, leaving you high and dry with no account access. You could get lucky and still have access to your account through the site via cookies, so check it out and make sure your info is correct, then reset your password to be safe.
|
SamtheDog
|
Posted - 2006.01.10 03:22:00 -
[22]
I took a look at the following links & found some intersting info. First being that they want you to enter your current login/password as well as your email. With this info alone...they are able to hijack your account.
My feeling is there is some opportunist who saw the accounts being hacked & took advantage of any info that may/may not have been stolen. You're very right about making a site look 'legit'. I've received them from ebay & paypal often..& I ALWAYS delete them.
Nevertheless, I went to the eve website & changed my password once again..but keep mind my id is quite unique...not easily figured out at all (even by a brute force program). Once they have that...you're gone.
I've also been able to find out the actual phone # for CCP on this website. If you are 'that' concerned...I'd suggest paying a little money & make a long distance phone call. Some of us have placed several years of time & effort into this game..noone wants to have that taken from them.
I raised this issue to call a heads up...if it's not what I think it is..better safe than sorry in this case
Cheers!
Sam
|
Nee'kita Frist
|
Posted - 2006.01.10 03:43:00 -
[23]
Edited by: Nee''kita Frist on 10/01/2006 03:43:47 Dear ***********, Taaketa
You account has been inactive for some time and we have as part of larger preventive security procedures reset your password to:
username: Taaketa password: lnc2boi7
As this is being sent through unencrypted e-mail, wed like to ask you to proceed directly to our Account Management site (https://secure.eve-online.com/login.asp) and change your password again to an all new password. This is to further minimize the risk of security breach
We want to emphasize that we do not store credit card information, the only risk was concerning password usage and subsequent abuse of the accounts in question.
Remember: CCP will never ask you for your password.
We thank you for your patience in this matter and deeply apologize for the inconvenience this has caused. The EVE Support Team
My alt has the name "Taaketa" however, he does not have an account name featuring that name.
Also I was last logged on my account yesterday so it was not idle. No were near idle. I would cite this as a fake email and I'm surprised they even got access as that was sent to my confidential email address which I only use for online purchases.
|
Viruzzz2
|
Posted - 2006.01.10 03:56:00 -
[24]
i don't know if its intentional. but you do know you have a username and password in that post right?. might want to edit it out (unless for whatever reason, its intentional)
|
Julietta
|
Posted - 2006.01.10 04:03:00 -
[25]
Originally by: Viruzzz2 i don't know if its intentional. but you do know you have a username and password in that post right?. might want to edit it out (unless for whatever reason, its intentional)
Even if it was intentional, the mods will snip it out.
|
Ante
|
Posted - 2006.01.10 05:18:00 -
[26]
Originally by: Viruzzz2 i don't know if its intentional. but you do know you have a username and password in that post right?. might want to edit it out (unless for whatever reason, its intentional)
If you read the rest of the post you would have noticed:
Quote: My alt has the name "Taaketa" however, he does not have an account name featuring that name.
So there's no security problem.
|
Girdan Keirge
|
Posted - 2006.01.10 05:25:00 -
[27]
Originally by: Girdan Keirge It hasn't been pointed out how easy it is to fake a link. I've gotten tons of fake mails about ebay and paypal accounts with my username and a link to 'ebay' to change my pass. Thing is, it isn't ebay.
I said 'username' though that isn't really correct.
Just because my email may be [email protected], does not mean that I use bobjones as a login for any other purpose. Using your email name as a login name is a bad idea for (hopefully obvious) security reasons. Not that it stops anyone from doing it, which is partially why phishing schemes work. People don't make the effort to be secure (using the same login and/or password for multiple sites/games/etc, hence it's easier to fool people.
The mails I've gotten assume my email name is my username, which it is most definately not.
It looks like that's what has been happening here.
Assume that any mail with something other than your actual login name to be fake and a phishing attempt.
|
Arcticblue2
|
Posted - 2006.01.10 07:41:00 -
[28]
hmmm yeah I did get that mail as well... but I did get 4 other from CCP too ...
Password changed just in case.
4 from CCP where they don't mention username or password, only the Reset stuff, and one where they list a username and new password.
---------------------------------------------- "When I was a child, I spoke as a child, I felt as a child, I thought as a child: now that I am become a man, I have put away childish things." 1 cor. |
|
|
|
Pages: [1] :: one page |
First page | Previous page | Next page | Last page |