header.nohb.html

HACKED MEMBER ALERT -- ALL MEMBERS SHOULD TURN ON 2-FACTOR AUTHENTICATION

lossforgain

Team DFO
Staff member
Joined
Jan 22, 2007
Messages
16,676
Reaction score
5,161
Location
Lancaster, PA
As of 7:30am today, member @bellbrass is hacked.

IP tracking shows the account being used from the Netherlands. I was able to suspend the account while we attempt to contact the real member.

If you have not done so already, please turn on two-factor authentication for your account.
 

TheElectricCompany

Very well Known Member
Joined
May 20, 2016
Messages
1,116
Reaction score
680
Location
Houston, TX
If a well-known member seems to no longer know how to speak English, or is suddenly very aggressive or rude in private messages, don't buy from them. The warning signs are fairly obvious.

The taunting posts from the guy who hacked aparker2005 were a clear departure from the way anyone on this page communicates.
 

rdumas

Very well Known Member
Silver Supporting Member
Joined
Mar 20, 2016
Messages
1,304
Reaction score
516
Location
NH, USA
Here is a thread where (in addition to reporting a post or member) you can publicize a hacked account for the protection of the rest of the forum.

Member @aparker2005 - account recovered successfully
Member @stevesmithfan - account recovered successfully

As of May 3, 7:30am
Member @bellbrass has been hacked. The user's account is suspended until he can be contacted.
I thought so....I actually responded to the sale post to try and ferret them out and report it.
 

Squirrel Man

DFO Master
Joined
Aug 28, 2020
Messages
4,393
Reaction score
6,585
wow.. this is becoming a virtual pandemic.

I changed my password(s) some time back to something ridiculously complicated and can't remember what it was.
 

lossforgain

Team DFO
Staff member
Joined
Jan 22, 2007
Messages
16,676
Reaction score
5,161
Location
Lancaster, PA
If anyone knows member "bellbrass" personally, please reach out to him about his account. We have been unable to reach him.
 

Squirrel Man

DFO Master
Joined
Aug 28, 2020
Messages
4,393
Reaction score
6,585
If anyone knows member "bellbrass" personally, please reach out to him about his account. We have been unable to reach him.
I was going to bring this up earlier but DFO has everyone's email, correct? For contacting and ID validation?

I think you guys can be contacted via the forum but establishing ID I don't know is practically possible.
 

DWSlingerland45

DFO Veteran
Double Platinum Supporting Member
Joined
Jan 16, 2011
Messages
2,968
Reaction score
543
Location
Mount Holly New Jersey
Here is a thread where (in addition to reporting a post or member) you can publicize a hacked account for the protection of the rest of the forum.

Member @aparker2005 - account recovered successfully
Member @stevesmithfan - account recovered successfully

As of May 3, 7:30am
Member @bellbrass has been hacked. The user's account is suspended until he can be contacted.

ALL MEMBERS SHOULD TURN ON 2-FACTOR AUTHENTICATION FOR THE SECURITY OF YOUR ACCOUNT.
For the IT Challenged among us ....how does one turn on 2 factor identification?
 

TonyVazquez

Very well Known Member
Joined
May 29, 2019
Messages
952
Reaction score
1,122
Location
Cohoes, NY
For the IT Challenged among us ....how does one turn on 2 factor identification?
If you're mobile device is android,
use the Google Authenticator...
...download it from the google play store,
it's free. Install it, and follow the instructions
on how to set it up.

I'm new to that app, but I set mine up anyway. I can't scan QR codes, but I use
the code generator in the app.
I'm confused. But I'd rather be confused
than Hacked.

Late edit: I'm all set, good to go.
 

lossforgain

Team DFO
Staff member
Joined
Jan 22, 2007
Messages
16,676
Reaction score
5,161
Location
Lancaster, PA
For the IT Challenged among us ....how does one turn on 2 factor identification?
1. Download an authenticator app like Google Authenticator or Authy.
2. Click on your avatar image in the upper menu bar.
3. Click “password and security”
4. Click to enable two step verification, and that will allow you to choose to receive codes by email or authenticator app. I tried it via email but that seemed like a hassle. The app works better, easier, once you have it installed. Also don’t forget to copy and save the backup codes the system gives you in case you get locked out.
 

swarfrat

tympanus laqueus XV
Joined
Dec 15, 2014
Messages
7,328
Reaction score
2,534
Please consider u2f over google. That's kinda how we got here.
 

blueshadow

Just Shuffling along
Staff member
Joined
Aug 5, 2005
Messages
14,405
Reaction score
3,448
Location
North of Austin, Texas
2F is easy to turn on and set up. Download google Authenticator. Yea a bit of a pain but better safe than sorry. Can also use email authorization 2F. I have not tried it.
 

Rock Salad

Very well Known Member
Silver Supporting Member
Joined
Aug 6, 2018
Messages
1,477
Reaction score
1,365
Location
Tulsa, Ok. USA
Screenshot_20220505-140718_Chrome.jpg


Screenshot_20220505-140709_Chrome.jpg
 

esooy

DFO Veteran
Joined
Sep 6, 2005
Messages
2,114
Reaction score
1,053
Didn’t realize 2FA was available on this site. I use it whenever it’s available + LastPass. 20+ character passwords minimum.
 

Pat A Flafla

DFO Veteran
Joined
Nov 28, 2020
Messages
2,433
Reaction score
2,775
Is there a tool to monitor members IP addresses? Would seem to me a sure indicator of a cracked account.
I'm spoofalicious with my IP because I hate being tracked and I like foreign sports streams, so I'd get flagged a lot. I also log in with several devices communicating through several different networks, so even if it's not my home computer throwing out false IP info, my IP still changes a lot. Yeah, I'm *that guy.* But you probably aren't surprised.
 

WLVN

Well-Known Member
Joined
Jul 10, 2018
Messages
370
Reaction score
411
Location
Houston, TX
Is the Google authenticator only if you're accessing the forum on your smart phone? Probably a stupid question.

I'm usually on a desktop and typically stay logged on. Occasionally, when I'm mobile I'll access the forum on my phone.

I enabled two step verification using my email address.
 


Top