[Moderator Warning] READ THIS NOW

13 years ago

Thanks for the heads up Paul. These blokes really horke me off. But good advice no matter what.
thanks,
--Jack

ps its the 1st Friday of the month and the 2600 club is meeting in Raleigh - you want me to ask for a favor against these morons ;-)

Thanks

Signature

Let's get Tim the kidney he needs!HELP Tim

Mega Monster WSO for KimW http://ow.ly/4JdHm

{{ DiscussionBoard.errors[4005939].message }}

Roaddog

13 years ago

Thanks Paul for the warning.

I saw that, and wondered what was up with the strange link.

Jim

Thanks

Signature

KimW a Fellow Warrior Who Really Needs Help
Ken Strong Cancer Donation | Keep Ken Strong WSO

{{ DiscussionBoard.errors[4005974].message }}

KimW

13 years ago

I can't believe I didn't catch that. Got to change me pw ASAP.

Luckily I do not use the same pw for forums and Paypal and/or banking accounts.

Thanks

Signature

Read A Post.
Subscribe to a Newsletter
KimWinfrey.Com

{{ DiscussionBoard.errors[4005989].message }}

koppster

13 years ago

Thanks for the heads up.

Thanks

{{ DiscussionBoard.errors[4005991].message }}

Giani

13 years ago

Thanks for the information.

Thanks

Signature

{{ DiscussionBoard.errors[4006004].message }}

John Durham

13 years ago

God! Why do people have to be Ass holes!!!

Sorry!

Thanks Paul.

Thanks

{{ DiscussionBoard.errors[4006017].message }}

Istvan Horvath

13 years ago

In moments like this I really feel sorry that I've lost the contact with my former Chechen bodyguards... We could send them around with a Kalashnikov to hunt down those guys

Thanks for the heads up!

[ 3 ] Thanks
1 reply

Signature

{{ DiscussionBoard.errors[4006028].message }}

donaldwilson 13 years ago

big thanks for the heads up my man.....and great points too
- Thanks
{{ DiscussionBoard.errors[4006035].message }}

masterjani

13 years ago

Thanks for the alert.

Always look for the link,by placing your mouse over.Rather than just click on any link.

Thanks
1 reply

Signature

Increase your Google rank - (VARIETY SEO) High Quality Backlinks From Different Sources

{{ DiscussionBoard.errors[4006037].message }}

Paul Myers

13 years ago

Jack,

ps its the 1st Friday of the month and the 2600 club is meeting in Raleigh - you want me to ask for a favor against these morons ;-)

[chuckle] Thanks, but the host is probably not at fault, and they'd just switch hosts or domains. The only people who'd be hit would be the innocent.

John,

Because being a destructive [expletive skipped] is easier than doing something productive. Also, some folks find the pain of others amusing. Some are just sociopaths. Plenty of other reasons.

Easy money is the biggest reason for something like this.

Paul

[ 1 ] Thanks
1 reply

Signature

.
Stop by Paul's Pub - my little hangout on Facebook.

{{ DiscussionBoard.errors[4006045].message }}

Paul Myers

13 years ago

Some folks may not "get" why using the same password for multiple accounts is a big deal. Consider: UberScum gets the password for your main email account. He goes to the banks in your area and guesses at your username at your bank. The most common: Your email address, the first part of same, or your name.

Gets a result, and hits the "Forgot my password" button. At many places, that will get the password sent back to the compromised address, opening up your account to the creep.

The most likely targets here are Paypal accounts.

Paul

Thanks
2 replies

Signature

.
Stop by Paul's Pub - my little hangout on Facebook.

{{ DiscussionBoard.errors[4006075].message }}

Paul Myers 13 years ago

By the way.. This is a perfect example of why member moderation is so important. Gujju Boy is the only one who reported this. We would most likely never have noticed it without his help. We'd have probably just deleted the thread as an ad, if it was reported, and not done anything with it otherwise.

Scroll back up to Gujju Boy's post and thank that man!

Paul

PS: I sit corrected. Rod Cortez reported a separate instance of the same thing. Thanks, Too Much Coffee Man!
- [ 1 ] Thanks
Signature

.
Stop by Paul's Pub - my little hangout on Facebook.
{{ DiscussionBoard.errors[4006088].message }}

Tina Golden

13 years ago

Originally Posted by Paul Myers

Some folks may not "get" why using the same password for multiple accounts is a big deal. Consider: UberScum gets the password for your main email account. He goes to the banks in your area and guesses at your username at your bank. The most common: Your email address, the first part of same, or your name.

Gets a result, and hits the "Forgot my password" button. At many places, that will get the password sent back to the compromised address, opening up your account to the creep.

The most likely targets here are Paypal accounts.

Paul

I learned this the hard way. My email was hacked and that's exactly what happened. I was naive enough to have the same password pretty much everywhere and the hacker got into my PayPal account. Over $500 was taken from my bank account via PayPal before it was stopped.

Thankfully, I did get the money back but I learned that my PayPal password is not used anywhere else, EVER.

Thanks

Signature

Discover how to have fabulous, engaging content with
Fast & Easy Content Creation
***Especially if you don't have enough time, money, or just plain HATE writing***

{{ DiscussionBoard.errors[4007675].message }}

ganesh

13 years ago

Thanks for the warning. This will make all members more vigilant. Warriors are here to fight back any attempt to damage or destroy this valuable forum.

GANESH

Thanks

Signature

{{ DiscussionBoard.errors[4006119].message }}

myagi007

13 years ago

Hi

Thanks for the warning, changing all my passwords now...

Like someone said earlier the ******** know its easy money if they can get your account details and then use it in to something else.

Thanks again.

Thanks

Signature

Would you like to make Â£5k per week, have a look at www.affiliatemarketing1.com.

{{ DiscussionBoard.errors[4006130].message }}

topnichekeyword

13 years ago

Thanks for the alert!

Thanks
1 reply

Signature

120 PR9-PR8 Forum Packet for Effective Backlinking! Totally freeee! Don't miss it!!

{{ DiscussionBoard.errors[4006144].message }}

JohnMcCabe 13 years ago

I wonder how hard it would be to add an extra ring to the Inferno for scum like this...

To all the sharp-eyed ones out there, thank you!
- Thanks
{{ DiscussionBoard.errors[4006174].message }}

luzern

13 years ago

Now I'm getting this message when opening that website:

403 Forbidden!

The address you have entered is not open to the public

Thanks
1 reply

{{ DiscussionBoard.errors[4006164].message }}

Paul Myers 13 years ago

Originally Posted by luzern

Now I'm getting this message when opening that website:

403 Forbidden!

The address you have entered is not open to the public

I didn't include the complete link. Just the base URL, so people could see the example of how URLs in many phishing attempts are constructed.

Paul
- Thanks
Signature

.
Stop by Paul's Pub - my little hangout on Facebook.
{{ DiscussionBoard.errors[4006200].message }}

Fernando Veloso

13 years ago

Thanks for the headsup Paul.

But... it's 2011 folks. Buy a copy of RoBoform and use common sense while loggin in to daily websites.

Heck! If you don't, I'll write a WSO for it.

Thanks
1 reply

Signature

People make good money selling to the rich. But the rich got rich selling to the masses.

{{ DiscussionBoard.errors[4006202].message }}

Tim Dini 13 years ago

Originally Posted by Fernando Veloso

...it's 2011 folks. Buy a copy of RoBoform...

Another option is LastPass (lastpass.com)

Like Robo but it's free.
- Thanks
- 1 reply
Signature

WordPress + Thrive Theme Builder + Shapeshift Theme!
The Perfect Combination of Total Control, Stunning Design, & Rapid Site Building
WordPress Will Never Feel The Same
{{ DiscussionBoard.errors[4008952].message }}
- R Hagel 13 years ago
  
  [Moderator Warning] READ THIS NOW
  
  Dang. I thought this thread was gonna be a warning ABOUT the moderators. Like one of them is off his meds and running amok or something.
  
  Good job and thank you to the vigilant folks who spotted the phishing attempt (GB and RC). This is one of those times it would be cool to still have the "buy a beer" (or coffee) function.
  
  And to anyone who actually spotted that rogue link, REALIZED it was a phishing attempt... and did NOT report it: Tsk, tsk. You're grounded. No WF for a month.
  
  Becky
  
  [ 1 ] Thanks
  
  {{ DiscussionBoard.errors[4009006].message }}

JamieSEO

13 years ago

Appreciate the heads up

I always use different usernames and passwords - it's why I would die without Roboform

Thanks

Signature

{{ DiscussionBoard.errors[4006204].message }}

Clyde

13 years ago

Thanks for looking out Paul.

Thanks

Signature

Generate Unlimited Number of Micro Niche Keywords, Multi-threaded EMD Finder PLUS More!

50% OFF WSO.

{{ DiscussionBoard.errors[4006212].message }}

Grim Reaper

13 years ago

Hi Paul,
Check my IP and you will know who I am.

If you would like me to send a few friends their way just send me some info and say the word.

HAGD

~GR~

Thanks

{{ DiscussionBoard.errors[4006228].message }}

Lulu Chil

13 years ago

Thanks Paul for the warning.

Thanks

{{ DiscussionBoard.errors[4006239].message }}

John Durham

13 years ago

Question: Paul I have been logging into my yahoo account lately and reading emails, then I come back and log in later and they still look un opened, you have any idea what that could be?

In 5 years its never been the case but ALWAYS is now.

Thanks

{{ DiscussionBoard.errors[4006243].message }}

sbucciarel

Banned 13 years ago

Thanks so much for the heads up on this. I will be extra vigilant about forum logins.

Thanks

{{ DiscussionBoard.errors[4006244].message }}

Paul Myers

13 years ago

John,

Nope. Gotta ask Yahoo about that one.

Paul

Thanks

Signature

.
Stop by Paul's Pub - my little hangout on Facebook.

{{ DiscussionBoard.errors[4006285].message }}

AnonymouS12

13 years ago

Thanks for warning us, Paul!

Thanks

{{ DiscussionBoard.errors[4006399].message }}

williamrs

13 years ago

Thanks for the heads up!

I use to be very cautious, but sometimes we are in a hurry and may commit mistakes!

Thanks

Signature

Steal My Profit Strategy

>> Download Now <<

{{ DiscussionBoard.errors[4006467].message }}

yukon

Banned 13 years ago

Report them to Godaddy?

http://www.betterwhois.com/bwhois.cgi?verification=5797&domain=zzl.org&submit btn=Continue

Thanks

{{ DiscussionBoard.errors[4006558].message }}

Steven Fullman

13 years ago

One more thing...this is IMPORTANT!

If someone decides to really screw with you...they could modify your "hosts" file.

I'll assume you don't know what this is, since 99% of folks fall into that category. If you do, pat yourself on the back and read on anyway.

Whenever you type in a website address, your operating system (Windows, Mac, Linux) ALWAYS tries to find the IP address in its local "hosts" file first.

Always.

Your "hosts" is a simple text file, mapping IP addresses to domain names...

See here for your OS

Normally your "hosts" file is pretty empty.

Normally it's so empty you'll never see it.

Normally it's so empty your OS will never use it.

Normally it's so empty your browser has to give up and ask elsewhere...(it basically asks the internet root servers where to find stuff instead).

Now...here comes the ****IMPORTANT NEWS****

If someone has tampered with your "hosts" file:

1) it doesn't matter whether you personally typed the URL, and
2) it doesn't matter whether you have a so-called "safe" bookmark either.

(...and let's face it...do you *really* read the system notification popups every time you install something? Me neither...)

Because if someone has tampered with your hosts file, and added an entry for PayPal.com ...and added an IP address which *sends you to their cloned version of PayPal.com*, it's unlikely you'll ever realize.

Why?

'Cuz you typed it in yourself, that's why! Must be safe, right?

Wrong...

Never underestimate the power of the bad guys. They're (unfortunately) often two steps ahead of the good'uns, and twice as smart.

Cheers,
Steve

[ 11 ] Thanks
3 replies

Signature

Not promoting right now

{{ DiscussionBoard.errors[4006560].message }}

Bill Farnham 13 years ago

@Steven Fullman,

I'm sending you the bill for my new sleeping pills presciption...

I'm buying the BIG bottle...

~Bill
- [ 1 ] Thanks
- 1 reply
Signature
{{ DiscussionBoard.errors[4006602].message }}
- Steven Fullman 13 years ago
  
  Originally Posted by Bill Farnham
  
  @Steven Fullman,
  
  I'm sending you the bill for my new sleeping pills presciption...
  
  I'm buying the BIG bottle...
  
  ~Bill
  
  Hey Bill,
  
  Long time no sleep...erm...speak!
  
  How are you?
  
  Steve
  
  PS I thought the post would be a *cure* for insomnia, not a cause
  
  [ 1 ] Thanks
  
  Signature
  
  Not promoting right now
  
  {{ DiscussionBoard.errors[4006629].message }}

jacktackett

13 years ago

Originally Posted by Steven Fullman

One more thing...this is IMPORTANT!

If someone decides to really screw with you...they could modify your "hosts" file.

I'll assume you don't know what this is, since 99% of folks fall into that category. If you do, pat yourself on the back and read on anyway.

Whenever you type in a website address, your operating system (Windows, Mac, Linux) ALWAYS tries to find the IP address in its local "hosts" file first.

Always.

....

Great point Steven - which is why in windows I ALWAYS write protect the hosts file - so any changes have to be done by hand by an administrator account.

As Mad eye would say - Eternal Vigilance!

--Jack

Thanks

Signature

Let's get Tim the kidney he needs!HELP Tim

Mega Monster WSO for KimW http://ow.ly/4JdHm

{{ DiscussionBoard.errors[4006858].message }}

sanssecret

13 years ago

Originally Posted by Steven Fullman

One more thing...this is IMPORTANT!

If someone decides to really screw with you...they could modify your "hosts" file.

I'll assume you don't know what this is, since 99% of folks fall into that category. If you do, pat yourself on the back and read on anyway.

Whenever you type in a website address, your operating system (Windows, Mac, Linux) ALWAYS tries to find the IP address in its local "hosts" file first.

Always.

Your "hosts" is a simple text file, mapping IP addresses to domain names...

See here for your OS

Normally your "hosts" file is pretty empty.

Normally it's so empty you'll never see it.

Normally it's so empty your OS will never use it.

Normally it's so empty your browser has to give up and ask elsewhere...(it basically asks the internet root servers where to find stuff instead).

Now...here comes the ****IMPORTANT NEWS****

If someone has tampered with your "hosts" file:

1) it doesn't matter whether you personally typed the URL, and
2) it doesn't matter whether you have a so-called "safe" bookmark either.

(...and let's face it...do you *really* read the system notification popups every time you install something? Me neither...)

Because if someone has tampered with your hosts file, and added an entry for PayPal.com ...and added an IP address which *sends you to their cloned version of PayPal.com*, it's unlikely you'll ever realize.

Why?

'Cuz you typed it in yourself, that's why! Must be safe, right?

Wrong...

Never underestimate the power of the bad guys. They're (unfortunately) often two steps ahead of the good'uns, and twice as smart.

Cheers,
Steve

Damn Steve, now I'm really scared. My gmail got hacked a while back and I finally got round to installing roboform and changing all my passwords. (thankfully, I always kept a different password for Paypal).

How do I find this 'hosts' file to check it's as empty as it's supposed to be?

Thanks

Signature

San

The man who views the world at fifty the same as he did at twenty has wasted thirty years of his life. ~Muhammad Ali
Pay me to play. :) Order a Custom Cover today.

{{ DiscussionBoard.errors[4008243].message }}

lesterlim85

13 years ago

Thanks Paul for the heads-up.

Cheers,
Lester

Thanks

Signature

The Best Spinner is not the best. This cutting-edge technology puts it to shame!

{{ DiscussionBoard.errors[4006646].message }}

Mike McAleer

13 years ago

thanks paul. it kind of disturbs me how often people fall for this crap.

Thanks

Signature

Recent domain flips : $8->$1000 Social recruiting Software dot com $8->$2000 MobileSalesSoftware.com
Invest in domains without the hard work !
Email for details...Mike McAleer at me dot com

{{ DiscussionBoard.errors[4006700].message }}

MMWoodward

13 years ago

That's pretty unsettling. It's a good idea to be reminded now and again of just how important it is to be safe, and especially since it's only too easy to get lost in the routine of casual online browsing.

Thanks

Signature

Original content, fast turnaround, and high quality.
Article writer for hire: $0.04/word.
Here's what Jenn Dize had to say:
"I can safely count her work among some of the best I've read."

{{ DiscussionBoard.errors[4006706].message }}

Rsberg

13 years ago

Thanks for the heads up!

Sad what some will do these days...

Thanks

{{ DiscussionBoard.errors[4006724].message }}

Coby

13 years ago

Oh crap! That's scary! Good reminder to myself that you can never be too careful, especially online...

Thanks

Signature

.

Click Here To Get A FREE Affiliate Marketing Software

.

{{ DiscussionBoard.errors[4006745].message }}

rekerlolz

13 years ago

Yo! Good lookin Paul! I will watch out for this @$$HOLE

Thanks

{{ DiscussionBoard.errors[4006750].message }}

kimberly Aita

13 years ago

wow, it never ceases to amaze me what people will do just to be mean or hurt others.

I guess I am going to be changing my password here right now and some other places.

Thanks,
Kim

Thanks

{{ DiscussionBoard.errors[4006878].message }}

Roaddog

13 years ago

Originally Posted by Gujju Boy

Hi Paul,
Thanks for the warning.
I posted a same thread few minutes before this one appeared :

http://www.warriorforum.com/main-int...m-account.html

As this is an official thread from moderator, please delete/lock my thread.

Best Regards,
Gujju Boy

That was a nice catch Guujji Boy and Rod Cortez.

I clicked on the link and at first thought it was just a spammer that had screwed up his link. Clicked off almost immediately, I didn't have an interest in the product, but we get a lot of spammers in the OT. I always want to see what the 'angle' is.

Lesson learned and point taken.

Missed that one. So again, good vigilance, you guy's probably saved some people some serious headaches.

Good on ya...as the Aussies say

Thanks

Signature

KimW a Fellow Warrior Who Really Needs Help
Ken Strong Cancer Donation | Keep Ken Strong WSO

{{ DiscussionBoard.errors[4006958].message }}

shahriyar

13 years ago

Oh that's awful. Thank you for the warning.

Thanks

Signature

Super WSO => No hype, No Catch, 25+ SEO Tools

**Keep Hackers Away** 176+ Rock Solid Security for Wordpress

{{ DiscussionBoard.errors[4007075].message }}

MatthewNeer

13 years ago

Thanks for the tip man,

Its sad that people have to resort to being scammers to try and earn a living online rather than just putting in the hard work to do it right and make an honest living eh?

But to further your point, thats why you should ALWAYS check the url your visiting for legitimacy before ya put in any credentials...

Thanks

Signature

Three (3) Income Streams DFY
New FREE Website Builds Your List
And Earns From 3 Income Streams
http://ListLeverage.com

{{ DiscussionBoard.errors[4007098].message }}

celente

13 years ago

I think with teh economy struggling you will see more of this.

People just after a quick buck and not bothered to build a real business.

Pretty sad really ey?

Thanks

Signature

Create a $5000 USD a month Business. 1-on-1 Coaching. By 6 figure marketer! - CLICK HERE

{{ DiscussionBoard.errors[4007205].message }}

Leanne King

13 years ago

Thanks for the warning - time to start thinking before randomly clicking

Thanks

Signature

COUPON CRUSHER WSO - TRAFFIC GRAB CHEAT SHEETWP Mini Money Makers - XFACTOR WP THEME -
Optimize Press WordPress Theme Review |
HTML Sites to WordPress | WordPress Security |WP Twin Review | Nanacast Fast Start

{{ DiscussionBoard.errors[4007240].message }}

cashmagnet

13 years ago

Thanks for informing us wow some ppl are just low low low

Thanks
3 replies

Signature

If your looking for fast success with low failure get a coach/consultation, DM for skyp bookings.

{{ DiscussionBoard.errors[4007244].message }}

Mike Baker

13 years ago

Originally Posted by Tim Dini

Another option is LastPass (lastpass.com)

Like Robo but it's free.

Originally Posted by Fernando Veloso

Thanks for the headsup Paul.

But... it's 2011 folks. Buy a copy of RoBoform and use common sense while loggin in to daily websites.

Heck! If you don't, I'll write a WSO for it.

Don't ever rely on password program alone. Those too can be hacked. I personally recommend writing them down on a notepad. Nobody can hack them if they are not located in your computing system.

Thanks
1 reply

Signature

{{ DiscussionBoard.errors[4009124].message }}

Ken Strong

13 years ago

Originally Posted by Mike Baker

Don't ever rely on password program alone. Those too can be hacked. I personally recommend writing them down on a notepad. Nobody can hack them if they are not located in your computing system.

There's also Roboform2go, which lets you store all the passwords on a thumb drive or other removable media, so the passwords are never stored on your computer.

But writing them down works too, of course.

Thanks
1 reply

Signature

The RETURN of OBI:
Learn IM From the Experts Who Are Already Doing It!

"Sammy-approved, baby!" -- Offline Brat Pack

{{ DiscussionBoard.errors[4011453].message }}

Mike Baker

13 years ago

Originally Posted by Ken Strong

There's also Roboform2go, which lets you store all the passwords on a thumb drive or other removable media, so the passwords are never stored on your computer.

But writing them down works too, of course.

If it's connected to your computer via USB it can also be hacked, even with military grade AES encryption.

If data information is digital, we all run the risk of having it stolen.

Thanks
1 reply

Signature

{{ DiscussionBoard.errors[4013211].message }}

seasoned

13 years ago

Originally Posted by Mike Baker

If it's connected to your computer via USB it can also be hacked, even with military grade AES encryption.

If data information is digital, we all run the risk of having it stolen.

Yeah, in most cases there is a trusted area where things are NOT encrypted. Like SSL. With SSL, the info is encrypted between your browser network connection and the other server. Within their server, and between your keyboard and browser network connection, it ISN'T encrypted. So you STILL have to worry about keyloggers and THEY should still worry about rootkits and breakins. But HEY, the connections between the two are pretty safe.

BTW a good example of this is Keepass. They actually have an option to KEEP various fields in memory encrypted! WHY? Because on some environments, and some processors, it is possible for one process(like a virus), to access memory used by another process(like keepass). The encryption helps ensure that any such attempt is likely to come up with junk. USUALLY, encrypted data is decrypted before it is put into memory, if it has to be used in its decrypted state. It is just easier, faster, more efficient, and generally safe.

Steve

Thanks

{{ DiscussionBoard.errors[4014141].message }}

AdSellCanada 13 years ago

It pays to be very diligent online, treat every place as if it was a new entity - never use the same pwords or emails.
- Thanks
Signature

Free Canadian Classifieds! http://AdSell.ca

Free USA Classifieds! (coming soon) http://AdSell.us
{{ DiscussionBoard.errors[4011135].message }}
KatheLucas 13 years ago

Thanks Paul...always great to be made aware of these things - jerks :rolleyes:
- Thanks
Signature

New To IM And Still Confused? Free "How To" Videos To Give You A Boost: www.WebBusinessBasics.com

Bring YOUR new product launch to us at www.LaunchAlerts.com
{{ DiscussionBoard.errors[4032562].message }}

BrenOHara

13 years ago

Thanks for that heads up Paul!!

Thanks

Signature

MasterResellRights.com - Since 2006. Updated daily. Exclusive members only PLR. Check out our Private Label Rights catalog for our listings.

{{ DiscussionBoard.errors[4007266].message }}

tanaris

13 years ago

Thanks Paul, that was close.. whew!

Thanks

{{ DiscussionBoard.errors[4007269].message }}

Gregg

13 years ago

Scumbag is the proper term... thanks for the heads up. I am sure it will come back to bite him/her somehow.

Thanks

{{ DiscussionBoard.errors[4007393].message }}

seasoned

13 years ago

Yeah, I saw a number of people a couple of years ago fall into the trap Paul alludes to. I ended up changing EVEN similar group passwords. I have ALWAYS split up password bases based on the area. So my paypal password is VERY different from my warrior password, and my bank one is also pretty different. Alas, today I have HUNDREDS of accounts that I keep in keepass. Again though, it is encrypted with a higher level password.

And this is a GREAT reason to be VERY careful with the URLs. Ironic! Just last wednesday I was telling some coworkers how random password entry at the customer we are at is impossible, because by the 3rd try, you are locked out. I told them of a guy that I knew that did a similar trick to this to get user names and passwords, without trial and error. He eventually disabled the university's computer department, and was BANNED from the campus.

Steve

Thanks

{{ DiscussionBoard.errors[4007395].message }}

Jimmy101

13 years ago

that's just horrible, as a new member, its good i came across this.

Thanks

{{ DiscussionBoard.errors[4007505].message }}

Bruce NewMedia

13 years ago

This is pretty important, I agree...as one who had two of their email accounts broken into in early May, I can tell you it was a big mess. ...

they did what Paul says, btw, they set up a redirect on my acct and I did not even know why I was not getting mail. ...lucky that I had very different acct passwords for the valuable places like banks and PP, etc. I take this very seriously.
_____
Bruce

Thanks

Signature

Get Offline Clients With NO Resistance!-CLICK HERE
POWER LETTERS Get Offline Appointments
These Email Templates Land You Great Clients!

{{ DiscussionBoard.errors[4007615].message }}

Rukshan

13 years ago

Thanks paul. These people never get success.

Thanks

Signature

{{ DiscussionBoard.errors[4007786].message }}

Marcus C

13 years ago

Thanks for the heads up, Paul. I hope just hope they were caught in time and nobody had their account compromised.

Why don't these guys just build a real, honest business of their own!

Thanks

Signature

>> $3,000 Per Month "No Lose" Coaching Program <<

{{ DiscussionBoard.errors[4008199].message }}

paulie888

13 years ago

Thanks for informing us about this latest phishing caper, Paul. There have been a lot of these going around, and one also has to watch out for phishing sites that are set up to be identical clones of popular sites like Paypal and Craigslist - those are usually a bit easier to spot though, because what you typically will receive is an official-sounding email urging you to log into your account right away for some reason or another, and this is already pretty much a red flag in itself.

Paul

[ 1 ] Thanks

Signature

[WSO] Secrets To Making $100/Day In 21 Days Or Less - Starting From Scratch!

>>> Features Jason Fladlien, John S. Rhodes, Justin Brooke, Sean I. Mitchell, Reed Floren and Brad Gosse! <<<

{{ DiscussionBoard.errors[4008233].message }}

mtmjohn

13 years ago

Thanks Paul for the warning.

Thanks

Signature

>> Affpaying.com -- 700+ CPA Networks Reviews -- 42,500+ CPA Offers Listed & Compared! <<
>> Affdaily.com -- Keeps You Updated On The Latest Affiliate Marketing News! -- Fully Customizable! <<

{{ DiscussionBoard.errors[4008318].message }}

William Prawira

13 years ago

Thanks for the Info.

I always take good care about the login/IDs that are associated with my financial bank account or credit card. Never once use them with the same password as what I use on forum.

I keep a list of my password on a file, but encrypted them so I'm the only one able to read and know what's the real password for each of my ID.

Thanks

Signature

Thanks,

William Prawira

{{ DiscussionBoard.errors[4008400].message }}

SamirSM

13 years ago

Wow!

So Phishermen have finally decided to target Warriors!

Thanks for the note Paul!

Thanks

{{ DiscussionBoard.errors[4008450].message }}

thesorcerersapprentice

13 years ago

Thanks for the heads up... pretty scary stuff, and like a lot of people have said I think you just instinctively trust the WF and 'click'.

Timely advice for us all.

Thanks

Signature

Tap into the Video Gold Mine with my Free 4 Part Offline Cash Secrets video course.

If you want to FINALLY start making money online then check out Instant Internet Lifestyle blog.

{{ DiscussionBoard.errors[4008510].message }}

ankur sharma

13 years ago

Thi definitely sucks. seriously, they can make more money if they stop hacking accounts and learn to create win win situation in business.

Thanks
1 reply

{{ DiscussionBoard.errors[4008524].message }}

Paul Myers 13 years ago

Hey...

All I did was tell y'all about it. I didn't spot this. If you really want to say thanks to the dude who made us aware of it first, go to http://www.warriorforum.com/main-int...ml#post4006059

... and thank Gujju Boy. And the next time you see a post by Rod Cortez, thank him, too. They're the ones who spotted the gimmick and reported it.

If you've ever wondered how important the role of members as moderators is, this is the perfect example. This is 100% the result of two people paying attention and clicking that little red triangle.

And if you've ever wondered if it's worth the effort, consider the amount of hassle and loss those two gents may have prevented by taking such small, but important, actions.

Paul
- [ 1 ] Thanks
Signature

.
Stop by Paul's Pub - my little hangout on Facebook.
{{ DiscussionBoard.errors[4008563].message }}

MBizInc

13 years ago

Thanks for informing us Paul! I can tell from my own experience that we should all pick different passwords for our www accounts!

Thanks

{{ DiscussionBoard.errors[4008634].message }}

Psychicwitch

13 years ago

Thank you for the Heads up. What is wrong with People today ?? Oh Yeah ~ Greed

Thanks

Signature

Myrtlelyn The Psychic Witch
Myrtlelyn's Psychic Parlor
http://www.psychicwitch.net

{{ DiscussionBoard.errors[4009017].message }}

lowkey786

13 years ago

thanks for the heads up Gujju Boy

Thanks

{{ DiscussionBoard.errors[4009022].message }}

Psychicwitch

13 years ago

Hi, I think I may be confused here. I signed up as a free member last night. I posted some replies, especially in the Motivational section, and Nothing I wrote is there. I put a lot of time into my profile last night as I thought this would be a nice social networking site. So, am I supposed to pay something for my posts to show or to participate in the forums ? I am confused a bit, I usually just stay mainly on Facebook.
Thank you in advance

Thanks

Signature

Myrtlelyn The Psychic Witch
Myrtlelyn's Psychic Parlor
http://www.psychicwitch.net

{{ DiscussionBoard.errors[4009094].message }}

shystar

13 years ago

Thank you for this!

Thanks

{{ DiscussionBoard.errors[4009381].message }}

talfighel

13 years ago

Big thanks for the heads up. People will do anything to steal.

Thanks

Signature

Home Business "TOP PICKS"!
Home Business Tools And Resources!

{{ DiscussionBoard.errors[4009536].message }}

unlimitedmarketing

13 years ago

thats ridiculous how low people go to make a buck online.

Thanks
1 reply

Signature

Custom Craigslist Image Ad Designs & Videos For Craigslist Ads
Dallas WordPress Content Marketing Blog

{{ DiscussionBoard.errors[4011464].message }}

Oggyoi 13 years ago

Thanks guys for the heads up here.
- Thanks
Signature

SEO Agency spending $1k a month? PM for details.
Best PBN Hosting www.tiptopcrew.com
https://www.warriorforum.com/warrior...king-bank.html
{{ DiscussionBoard.errors[4011497].message }}

Rod Cortez

13 years ago

Thank you for making this public Paul in case that worm decides to try it again (they will probably will too).

The irony in all this is that the person who went through all that trouble to get a domain name and then make a copy of the Warrior Forum account log in page could have spent that time to put up a 3 to 5 page niche website with some affiliate links and adsense and probably make a few bucks. And with those few bucks could have bought some gourmet coffee.

RoD

[ 2 ] Thanks

Signature

"Your personal philosophy is the greatest determining factor in how your life works out."

- Jim Rohn

{{ DiscussionBoard.errors[4011549].message }}

paddyhack

13 years ago

Thanks for the warning

Thanks

{{ DiscussionBoard.errors[4011691].message }}

dagaul101

13 years ago

It's unfortunate but the larger a forum the more phishers and their like figure out ways to exploit it

Thanks

{{ DiscussionBoard.errors[4013405].message }}

StevenJones

13 years ago

Thanks for the heads up. I will be checking the URL more often now, don't want to get scammed.

Thanks

{{ DiscussionBoard.errors[4013620].message }}

gokulvikas

13 years ago

Hi paul.

Thanks for your warning.

Thanks

{{ DiscussionBoard.errors[4015790].message }}

Stefan S

13 years ago

Thank You Paul for the warning!

Thanks

Signature

Affiliate as a Business Concept

{{ DiscussionBoard.errors[4021055].message }}

hikerguy777

13 years ago

Thanks for the warning.

Thanks

{{ DiscussionBoard.errors[4021078].message }}

OrganicSeoGuru

13 years ago

Why not get on the SSL bandwagon, at least people will feel like they are at the right forum,

Thanks
1 reply

Signature

Seo Services and Search Engine Optimization Services

{{ DiscussionBoard.errors[4021278].message }}

James Clark 13 years ago

Hey Paul,

Thanks for letting us know about this. I will pay attention to what i'm during. You know I'm not too smart these days, especially when the hot weather comes around. (LOL)
- Thanks
Signature
Hard Hitting Information for Marketers
The Art of Marketing Online
{{ DiscussionBoard.errors[4021480].message }}

bking

13 years ago

Wow, lots to think about to try and secure our web activities...

There is so much of this crap out there, and you are right, Paul, they do it for many reasons but greed tends to be a big one.

Thanks for the warning.

Thanks

Signature

WSO - $10 and 1 hour ==> Over $1900? Check it out!

WSO - Offline Money Magic - Provide a valuable service while getting paid!

{{ DiscussionBoard.errors[4021707].message }}

omk

13 years ago

great catch, thanks!

Thanks

{{ DiscussionBoard.errors[4022095].message }}

area51backlinks

13 years ago

Wow, that is scary that someone would want to do that. Thanks for the heads up!

Thanks

{{ DiscussionBoard.errors[4023690].message }}

Brad Pollina

13 years ago

WOW! Thnks for bringing that to our attention.

Great idea to write protect the hosts file. I forgot about that one!

Thanks

Signature

"Be patient with me....God isn't finished with me yet!"

{{ DiscussionBoard.errors[4023770].message }}

Tom Brownsword

13 years ago

Awesome share, Paul.

Somebody mentioned RoboForm a few posts ago. If you want a free / open source password manager, KeePass is a decent one. Just make sure that you use a strong master password, regardless of the password manager being used (at least 15 characters, upper case, lower case, numbers, and special characters). I also recommend that you write it down, put it in your wallet, and treat it like a wad of $100 bills (you don't want to forget that password!).

Use the random password generator feature of these products and change your passwords frequently (I recommend every 3 months or so). And as many have already pointed out, NEVER use the same password for more than one site.

I have to look through my stuff; I'm pretty sure I have a report "somewhere" on good password security... If I find it, I'll be happy to share it.

Thanks
1 reply

Signature

Tom Brownsword, CISSPÂ®, GCIA, ITILv3
Certified Computer Security Pro
http://ProtectorSupport.com
http://BusinessActionSteps.com
------------------------------

{{ DiscussionBoard.errors[4026258].message }}

Jaguar-TI 13 years ago

Really appreciate the heads up Paul.

Thanks to everyone who provided extra input for security measures and ways this scum dwellers can mess your life.

Jaguar
- Thanks
{{ DiscussionBoard.errors[4027364].message }}

Cloudzz

13 years ago

Thanks for the heads up!

Thanks

{{ DiscussionBoard.errors[4027435].message }}

ysckyler

13 years ago

Thanks for the heads up!!! I didnt notice until i read your post!!!

Thanks

{{ DiscussionBoard.errors[4027502].message }}

tgdrew

13 years ago

Paul,
Thanks for the warning. I try to always make an effort to double check addresses before I log in anywhere. Usually by doing exactly what you said and physically typing in the web address.

Thanks

{{ DiscussionBoard.errors[4032585].message }}

lisalafrance

13 years ago

Hmmm,

I'd love to read the warning.

Where can I find it?

Thanks
1 reply

Signature

Lisa LaFrance
An Honest Mom Who Can Help YOU Make Money Online

Let me show YOU how to make your first $1000 in internet marketing!

{{ DiscussionBoard.errors[4046799].message }}

Rod Cortez

13 years ago

Originally Posted by lisalafrance

Hmmm,

I'd love to read the warning.

Where can I find it?

It's on the first page of this thread, but here it is for your convenience:

Originally Posted by Paul Myers

Watch out for this!

Some idiot just posted a "discount offer" for a popular article submitting product. The text link said it went to an ad in the Warrior Products and Services section. The real link went to a page at http://warriorforum.zzl.org.

That page was an exact copy of the log-in page for this forum.

Not content to spam the crap out of the place, this scumbag wants to steal your account. You may be certain this will not be the only such attempt. Be extremely cautious of where you are when you intend to log in to this forum, or any other site.

If they're doing it here, the same people will be doing it on other forums.

The part of the address appearing immediately prior to the first / after http:// should be www.warriorforum.com. No variants. It's best that you type it in yourself or load the page from a bookmark, as it's easy to miss things like warrliorforum or warr1orforum or warriorf0rum, warriorform, etc.

There's a lot more at stake for many of you than just your WF account in a situation like this. It's way too common for people to use their main email addresses here, along with the password they use for multiple sites. (Hint: Different password for every site!)

I guarantee you, there are hundreds of people here who use their Paypal address as the address in their forum profiles, and have the same password for both. Let the creeps get hold of that, and you lose a lot more than just this account.

Paul

Thanks
1 reply

Signature

"Your personal philosophy is the greatest determining factor in how your life works out."

- Jim Rohn

{{ DiscussionBoard.errors[4046808].message }}

DamenRabat 13 years ago

Man, how creepy is that?! And how deep can people sink to exploit their own kind?

Thanks for the heads up, Paul! Deffinitely appreciated!
- Thanks
Signature
snow board boots flannel sheets queen king size bed linen lawn vacuum best way to lose weight fast easy way to lose weight purple sheets cordless tools cheap baby stuff
{{ DiscussionBoard.errors[4047103].message }}

ebvette

13 years ago

Thanks for the heads up

Thanks

{{ DiscussionBoard.errors[4048156].message }}

Alan Ashwood

13 years ago

Originally Posted by Paul Myers

Watch out for this!

Some idiot just posted a "discount offer" for a popular article submitting product. The text link said it went to an ad in the Warrior Products and Services section. The real link went to a page at http://warriorforum.zzl.org.

That page was an exact copy of the log-in page for this forum.

Not content to spam the crap out of the place, this scumbag wants to steal your account. You may be certain this will not be the only such attempt. Be extremely cautious of where you are when you intend to log in to this forum, or any other site.

If they're doing it here, the same people will be doing it on other forums.

The part of the address appearing immediately prior to the first / after http:// should be www.warriorforum.com. No variants. It's best that you type it in yourself or load the page from a bookmark, as it's easy to miss things like warrliorforum or warr1orforum or warriorf0rum, warriorform, etc.

There's a lot more at stake for many of you than just your WF account in a situation like this. It's way too common for people to use their main email addresses here, along with the password they use for multiple sites. (Hint: Different password for every site!)

I guarantee you, there are hundreds of people here who use their Paypal address as the address in their forum profiles, and have the same password for both. Let the creeps get hold of that, and you lose a lot more than just this account.

Paul

Thanks for this Paul

Pretty scary stuff. I think the warning should be repeated as often as possible in WF.

Thank again

Thanks
1 reply

Signature

Now where did I put that pencil?

Time for a cuppa.

{{ DiscussionBoard.errors[4050333].message }}

Sandor Verebi 13 years ago

Hi Paul,

Thank you and Gijju Boy for your heads up. I arranged accordingly for that.

Regards,

Sandor
- Thanks
{{ DiscussionBoard.errors[4050433].message }}

FalkonatorsSon

13 years ago

Thanks alot Paul that warning I'll be on an extra look out!!!
The Son

Thanks

{{ DiscussionBoard.errors[4050871].message }}

WDM

13 years ago

oh wow, yeah good looking out man. You really have to be careful clicking certain links because people will even make links like yahoo.com but in the HTML code they change the link to google.com. Obviously with links that have a bigger meaning to personal information though.

Thanks

Signature

Jacksonville marketing

{{ DiscussionBoard.errors[4050905].message }}

vblacke

13 years ago

Thanks for the warning, can't believe people would try to phish accounts on this forum.

Thanks
1 reply

{{ DiscussionBoard.errors[4051739].message }}

Seek Knowledge 13 years ago

Originally Posted by vblacke

Thanks for the warning, can't believe people would try to phish accounts on this forum.

From a scammers perspective it makes perfect sense to target this forum - for as Paul said in his post; no doubt some people use the same pass's here as they do with their paypal's.

Fortunately the Warrior Forum is one of the most switched on forums when it comes to identifying scams and the community here really helps each other out - that's why I joined up in the first place; because of the community I witnessed from lurking for years prior.

AJ.
- Thanks
{{ DiscussionBoard.errors[4794576].message }}

Smart Marketing 247

13 years ago

Thank Paul

Regards

Mark

Thanks

Signature

"Winners find a way, losers find an excuse"

{{ DiscussionBoard.errors[4051830].message }}

JackRT

13 years ago

I am assuming the post is removed...

Thanks

{{ DiscussionBoard.errors[4052069].message }}

Seek Knowledge

13 years ago

Thanks for the heads up Paul - unfortunately the internet will never see an end to these kind of scumbags!

I remember back when I was 11 years old and playing the online games site Neopets! Even in those days and on that website the EXACT same trick was being used by people to get passwords for a flippin fun and games site - ofcourse when being used on warrior's there is alot more at stake than some pretend money and highscores.

IMHO - It would be an excellent idea to make a special short report outlining these basic scams: phishing, stuffing, poxy images etc and compile it for Warrior's to read through free to educate them and give them a chance to avoid these scumbags money-robbing tactics.

Just so that people do know - if you see any unethical behaviour online then report the criminal to 1) www (dot) ic3 (dot) gov 2) The persons own web hosting service provider. 3) The forum admin at the forum they are using.

AJ.

Thanks

{{ DiscussionBoard.errors[4794570].message }}

andybeveridge

13 years ago

A big thanks for the warning. It would be so easy to miss something like this. I have to get out of the mindset that because I would never dream of scamming anyone then I will never be scammed myself.

Hope Karma really works.

Thanks

Signature

Become a Digi Warrior and join us in the successful Dig Warrior IM Academy
Join us at www.digiwarrior.com

{{ DiscussionBoard.errors[4794586].message }}

Alex Kage

13 years ago

Woah, hope no one got their login details snatched.

Thanks

{{ DiscussionBoard.errors[4795766].message }}

Nathy Curiel

13 years ago

Thanks for the warning !

Thanks

{{ DiscussionBoard.errors[4795992].message }}

whatihave

Banned 13 years ago

Thanks for the warning. You always have to be extra careful.

Thanks

{{ DiscussionBoard.errors[4798649].message }}

Paul Myers

13 years ago

Interesting this thing got resurrected now.

Just yesterday morning someone posted a phishing link here that was pretending to be a way to interface Aweber and Facebook.

Be careful out there...

Paul

Thanks
1 reply

Signature

.
Stop by Paul's Pub - my little hangout on Facebook.

{{ DiscussionBoard.errors[4798665].message }}

RAMarketing

13 years ago

Originally Posted by Paul Myers

Interesting this thing got resurrected now.

Just yesterday morning someone posted a phishing link here that was pretending to be a way to interface Aweber and Facebook.

Be careful out there...

Paul

Ha the funny part is that you CAN integrate aweber and facebook easily, aweber advertises it every time I log in :-)

Thanks

{{ DiscussionBoard.errors[4798674].message }}

John Romaine

13 years ago

Me and Richard Van will sort em out.

Richard you hold em down, Ill Google slap em.

Thanks

Signature

BS free SEO services, training and advice - SEO Point

{{ DiscussionBoard.errors[4798680].message }}

Paul Myers

13 years ago

Ha the funny part is that you CAN integrate aweber and facebook easily, aweber advertises it every time I log in :-)

I know. That's probably why they chose that, since a lot of people here would be aware of the option and not be as skeptical as they might otherwise have been.

Phishing attempts are getting a lot more sophisticated and targeted.

For instance, we often see people asking "everyone" or "all Warriors" to add them to Skype. Some of those requests are probably harmless and naive, but I'd bet a good chunk of them aren't. Why would anyone want to have that many people in their Skype contact list?

Google the phrase: Skype phish

Paul

Thanks
1 reply

Signature

.
Stop by Paul's Pub - my little hangout on Facebook.

{{ DiscussionBoard.errors[4798724].message }}

RAMarketing

13 years ago

Originally Posted by Paul Myers

I know. That's probably why they chose that, since a lot of people here would be aware of the option and not be as skeptical as they might otherwise have been.

Phishing attempts are getting a lot more sophisticated and targeted.

For instance, we often see people asking "everyone" or "all Warriors" to add them to Skype. Some of those requests are probably harmless and naive, but I'd bet a good chunk of them aren't. Why would anyone want to have that many people in their Skype contact list?

Google the phrase: Skype phish

Paul

I often wish I had no Skype, Facebook, Linkedin, etc list... oh to be back with one home phone (that I could unplug) oh well, onwards and upwards I guess :-)

Thanks

{{ DiscussionBoard.errors[4798728].message }}

braincandy7

13 years ago

What a puddle of smelly pond scum some people are.

Thanks

{{ DiscussionBoard.errors[4798739].message }}

robledo1

13 years ago

It's interesting to see people that dedicate a massive amount of time coming up with ways to rip people off.

I've been getting emails that take me to phony bank sites. They look legit until you start clicking around. LOL

Thanks for the heads up.

Thanks

{{ DiscussionBoard.errors[5826790].message }}

megawarrior

13 years ago

Thanks for the heads-up Paul! It's really important to check URLs for phishing attempts whenever someone provides a link. Anyway, it looks like his host has suspended his account for ToS violation. Someone must have reported it. Good job!