Official Accounts being hacked

[Herzog]

Be on the lookout - we've had a member report that his email was changed and account was taken over. Some private messages might have been sent by his account. DO NOT CLICK on suspicious links.

Let us know if you get an email saying your account email was changed.

I've banned the offending IP range for now but you never know.

-Shane

 

[Greg]

@moab_cj5 and @TRD270 so far...

 

[moab_cj5]

@moab_cj5 and @TRD270 so far...

what?

 

[jeepin4x4james]

Too bad that great deal winch wasn’t real! Haha

 

[TRD270]

Bastards….

 

[Greg]

what?

Verifying IP's... 😳

 

[moab_cj5]

Dude, I have nothing to do with it. What the hell is this

Edit: Also where is my sales post?

Verifying IP's... 😳

 

[TRD270]

To be fair. Cue letter Kenny harmony. I didn’t realize I hadn’t changed my stupid simple password from 23 years ago? 😂

 

[Kevin B.]

Too bad that great deal winch wasn’t real! Haha

This is how you know I didn't do it, because if I'd done it a winch is not what he'd have posted for sale...

 

[Herzog]

Dude, I have nothing to do with it. What the hell is this

Edit: Also where is my sales post?

When you log back in from (not) a VPN in Virginia let us know if there is anything funky with your account.

 

[TRD270]

This is how you know I didn't do it, because if I'd done it a winch is not what he'd have posted for sale...

Official Bag of Dicks Pranks And Gag Gifts from BagOfDicks.com

BagOfDicks.com™ is the official home of the original Bag Of Dicks pranks and gag gifts. Featuring the Basic Bag Of Dicks, the Singing Bag Of Dicks, the Evil Bag of Dicks, the Mini-Bag-Of-Dicks and so much more. There's only one BagOfDicks.com™, the only place to get official Bag Of Dicks prank gift.

bagofdicks.com

Enter @Kevin B. Hacking my account

 

[moab_cj5]

Damn, I wanted the $700 winch!

 

[moab_cj5]

I'm back in and will keep an eye on my account. Much stronger password this time around.

 

[Greg]

Damn, I wanted the $700 winch!

I wanted the $300 Baja Design LP9's you had listed!

 

[Greg]

I'm back in and will keep an eye on my account. Much stronger password this time around.

Good reminder for everyone reading this, myself included...

Update your PW's with something much more secure!

 

[moab_cj5]

I wanted the $300 Baja Design LP9's you had listed!

View attachment 164887

Me too! I'd take that deal!

 

[STAG]

Something I’ve always wondered about websites and forums I guess, @Greg and @Herzog, can you see what passwords we choose? Or is that something that’s encrypted against visibility to even you?

 

[Greg]

Something I’ve always wondered about websites and forums I guess, @Greg and @Herzog, can you see what passwords we choose? Or is that something that’s encrypted against visibility to even you?

No, we can't view PW's or private messages... we're fairly limited, which is fine by me.

 

[Herzog]

Something I’ve always wondered about websites and forums I guess, @Greg and @Herzog, can you see what passwords we choose? Or is that something that’s encrypted against visibility to even you?

What Greg said. We can reset your pw (but cannot see what it is) or lock the account and we can see what IP address you are posting from. But we usually never check ip addresses until there is a scenario like today.

I asked the user(s) to check their private messages after they got back in to see if anything suspicious was up. From there we notified users the scammers contacted.

 

[Herzog]

Also - passwords are encrypted at the db. This scammer likely got in from using a program to cycle through common or simple passwords against accounts.