• Hail Guest!
    We're looking for Community Content Contribuitors to Stratics. If you would like to write articles, fan fiction, do guild or shard event recaps, it's simple. Find out how in this thread: Community Contributions
  • Greetings Guest, Having Login Issues? Check this thread!
  • Hail Guest!,
    Please take a moment to read this post reminding you all of the importance of Account Security.
  • Hail Guest!
    Please read the new announcement concerning the upcoming addition to Stratics. You can find the announcement Here!

Account Security Risk?

Pinco

UOEC Modder
Stratics Veteran
Stratics Legend
I've just received a message from the EA Forgot Password service for all my accounts, and I have not requested it.

Should I start to be worried about it?
 

Pinco

UOEC Modder
Stratics Veteran
Stratics Legend
I've immediately changed all the passwords, and I change passwords every month...

This happened a couple years ago for alot of us.
What happen last time?
 

Xanth de Orlig

Journeyman
Stratics Veteran
Stratics Legend
I've immediately changed all the passwords, and I change passwords every month...

This happened a couple years ago for alot of us.
What happen last time?

I just ignored them, and changed my passwords for everything ... got them occasionally for a few weeks ... then it died off I believe ... I just refused to open them after the first one or two, once I heard others were getting them, and they were apparently not officially EA emails.


Did freak me out at first, but no harm came for me.

Something to do with the uo.com site or something last time i believe? Can't remember the specifics ...
 

Storm

UO Forum Moderator
Alumni
Stratics Veteran
Stratics Legend
Awards
1
Phishing attempt dont respond or do anything with them except delete thats what i did
 

Demonous

Rares Fest Host | Ches Jul 2010
Stratics Veteran
Stratics Legend
if you get an email saying that your password has been requested, this means that someone knows all of your account names and entered them 1 by 1 so you would have multiple emails, however they would need to know your email address and password for your email in order to find out what the passwords for your uo account names are
 

Pinco

UOEC Modder
Stratics Veteran
Stratics Legend
no these mails came from EA forgot password service, because inside there is my password... It is like when someone is trying to retrive the password and steal it from the mail :|
 

jradar71

Journeyman
Stratics Veteran
Stratics Legend
this means that someone knows all of your account names and entered them 1 by 1 so you would have multiple emails, however they would need to know your email address and password for your email in order to find out what the passwords for your uo account names are
What the above poster says is true. Someone knows your account name and they are going to the account management screen. There they enter your account name and hit "forgot password". Hence you getting the email with your password in the email. It is harmless UNLESS like stated before... they also need to know your email address and password to your email account.

As an added piece of mind do the following:

Download a free virus scanner called "Malwarebytes". Run this to make sure that there are no viruses on your computer. If you constantly work on the same computer then try to use something else (ie.. laptop or other location) and change your passwords from that PC instead of your normal one. If nothing comes up on the virus scan and you change passwords from a different location you can rest assure that you will be fine.

However, it should be an alert that someone is phishing for your information.
 

Petra Fyde

Peerless Chatterbox
Alumni
Stratics Veteran
Stratics Legend
If I remember right, the way someone explained it was this:
some kind of name generator is used to request lost passwords - any that returns an answer 'email sent' tells the sender that he has found a genuine user account name, he can then try to break the password with a similar generator.
I've probably not worded that very well, I don't understand it too clearly. It's all a bit 'brute force' and if you've got a reasonably strong password you're not likely to have any problem.
I think.
 

BlissMarie

Lore Keeper
Stratics Veteran
Stratics Legend
No one needs your account names to have mail like that sent to you.

There is an option to enter your email address, if you can't remember you account name. So, if someone knows your email address, they can enter and submit it and you will get mail.

BlissMarie
 

SixUnder

Legendary Assassin
Stratics Veteran
Stratics Legend
it is icq

the toolbar has software that is messing with the UO client causing crashes...

and i think its allowing access...

i am a programmer, still working on the kinks...dont quote me but there might be a issuse with it.
 

Xalan Dementia

Slightly Crazed
Stratics Veteran
Stratics Legend
No one needs your account names to have mail like that sent to you.

There is an option to enter your email address, if you can't remember you account name. So, if someone knows your email address, they can enter and submit it and you will get mail.

BlissMarie
that will email him with a list of his account names, but not password. If he is getting an email with a password in it that does mean they know his account name and are attempting to get a password.
 

BlissMarie

Lore Keeper
Stratics Veteran
Stratics Legend
that will email him with a list of his account names, but not password. If he is getting an email with a password in it that does mean they know his account name and are attempting to get a password.
Oops, you are right. I apologize for the error.
I just dug through my email and now see that is what I got back in 2005. I was thinking it contained other information.

BlissMarie
 

Elffin

Lore Keeper
Stratics Veteran
Stratics Legend
I found something interesting the other day, if you think you have a keylogger on your computer, try using the inbuilt keyboard with windows. Press the Windows button and the letter "U" and it will bring up a option to open a onscreen keyboard which you can use to type in a password or other sensitive information which should not be picked up by a keylogger.

Elf.
 
Top