There has been a phishing scam going on in game for a few months now, I've reported the two tells I've received. One of them was earlier tonight. While the 2FA normally can stop these things, from my understanding this scam has you enter that in as well. In general a good rule of Internet safety is not to use a link from anyone/where you don't trust and if it is for any sort of service that requires a log in go to the website yourself and search for what they want you to do not via a link or by copy/pasting an address that has been sent to you.
-
07-04-2020, 02:54 PMNaria
-
07-04-2020, 06:48 PMRyuSaarvaI think you need to buy a smartphone for this poor fellow so he can get one for free.Quote:
Originally Posted by Scox
-
07-04-2020, 06:54 PMScoxor he can buy a physical security token SQE security tokenQuote:
Originally Posted by RyuSaarva
-
07-04-2020, 06:59 PMRyuSaarvait's not free though so there are plenty of reasons why people would not have it.Quote:
Originally Posted by Scox
-
07-04-2020, 07:05 PMAduroT
Also, again, those tokens don’t help in this instance. The phishing sites ask you to put the code in along with your name and password, and then use all that to promptly take your stuff. All the security in the world will do nothing if you give them your keys.
-
07-04-2020, 10:22 PMMavriasThe phishing scam asks for your security token as well. This is common knowledge at this point. It wouldn't have helped.Quote:
Originally Posted by Scox
-
07-04-2020, 11:07 PMGemina
I don't trust a face I've never seen. I love my guildmates, but I don't know any of them personally. When one of them asked for my home address so she could send me something she made me, I gave her a PO box outside the city I live in instead. She is now no longer playing the game, and I never received anything from her. That doesn't mean she had ill intent, but I also wasn't going to find out if she, or he did or not. I make it well known that I am here just to play the game, so any attempts at getting to know me personally, meet me, or asking for RL information about myself are immediately shut down.
I also don't put anything in the company chest that I am not willing to give away. We've never been robbed that I know of, but there have been times where things were taken and the FC leader got very upset. I did warn her to keep what she needed instead of placing it in the chest, and that restricting tabs only serves to give the impression that she doesn't trust her own guildmates.
I am really sorry to hear about the circumstances. You would like to think you can trust people, but they show time and time again that privileges need to be earned. -
07-04-2020, 11:45 PMDeceptus
This is the exact reason SE advocates using the one time password (2 factor authentication) system.
-
07-05-2020, 12:14 AMAwha
Question is it really hacking if you manually give them your password?
-
07-05-2020, 12:42 AMMistakeNotIt is if they trick you into doing it. A classic hacking method known as Social Engineering.Quote:
Originally Posted by Awha
One of the most effective methods to bypass security.