Scammers

[Big Kahuna]

We had a new one today. Someone has figured out how to steal members email accounts and change them. Then start using their account to try and sell things and requesting payment by F&F only. Do not pay for anything by F&F. Especially if they mention it is due to Tax Liability. Report the post.

Working on finding a better way to secure things.


Members Effected

Fastgtfairlane
Smokeyseven.

If anyone knows Fastgtfairlane, let him know his account is locked right now. Have him contract me.

 

[Storbeck]

@Big Kahuna I tried to turn on two factor login today and it never sent me the confirmation email. Any idea what's up?

 

[Big Kahuna]

@Goldfishnado

 

[Goldfishnado]

I'm not seeing any indication of a bot attack or any automated malicious activity so my guess is these accounts are being compromised via brute force attack (easy passwords). Everyone should enable Two Factor Authentication (2FA) and I'll continue to monitor things in the background. I just tested 2FA and its working as expected, you can use any authenticator app that supports OATH TOTP which is pretty much all of them as well (Google Authenticator, Microsoft Authenticator, 1Password, Authy, etc). They usually have a 30 second timer and this site runs a cron job every 24 hours to sync the NTP time so it should be accurate.

Click on your username in the top right -> Password and security -> Verification code via app (preferred method) OR Email confirmation (for those not tech savvy to use an app)

I usually don't recommend backup codes as the main method but is a great backup incase the email address gets changed.

 

[Big Kahuna]

@Big Kahuna I tried to turn on two factor login today and it never sent me the confirmation email. Any idea what's up?

try checking your spam filter.

 

[smokeysevin]

100% probability of my issue being an old password, used elsewhere, short and simple to brute force. Bad habit but 2fa went on easy and I am thankful to BK for helping me out.

Sean

 

[CD155MX]

Do not pay for anything by F&F. Especially if they mention it is due to Tax Liability. Report the post.

Appreciate all your efforts.


Re: F&F Payments. I've decided that F&F is the only way I'll take Paypal moving forward because of the tax liability . Now the the IRS is forcing anybody to get a 1099 once they go over $600 in a year. Just not worth the hassle. I have a feeling there are others that feel the same. Cash, Check, or PP F&F. It may cost me some sales, but it is what it is.

 

[Quinc]

Normally I would have done the friends and family since he is a long time member. But the way he talked looked like hes not from this country. I work with a lot of foreign people and they use "My friend" a lot. Also do a good search and see if you can find the same photo..

 

[Quinc]

@jeepcreepcj

 

[waxhead]

Its a worry this scamming that's going on

 

[DylanS]

Normally I would have done the friends and family since he is a long time member. But the way he talked looked like hes not from this country. I work with a lot of foreign people and they use "My friend" a lot. Also do a good search and see if you can find the same photo..
View attachment 425756

Lol, the dude who got their accounts (obviously the same guy “selling”the b pipe) is such a sped. When he sent me a thread to “GT’s” post and said “look I’m not the only one requesting F&F” it had me cracking up.
Oh and “what no I’m not a scammer” lol

 

[Goldfishnado]

100% probability of my issue being an old password, used elsewhere, short and simple to brute force. Bad habit but 2fa went on easy and I am thankful to BK for helping me out.

Sean

Yup and it's becoming more and more common unfortunately that data breaches get sold on the dark web to scammers. Basically, a data dump of emails/password combos that scammers use on other sites.

 

[Quinc]

Password Strength
​

 

[Quinc]

data breaches get sold on the dark web to scammers.