Hacked, And It Could Happen To You.

Hi Family.
Just want to let you know that I found out this weekend that my computer (the one I use here) has been hacked. If you received weird or nasty messages from me please ignore, it ain't me.
But what is interesting is that bad guys noted a password to prove to me they got me, and it is the password I specifically used for this forum.
Out of sheer laziness, in never signed out of SCF, leaving my pathway open. I notice a great many of you are online constantly as well.
This is obviously a bad thing. We should all remember to sign off if we are not using the forum, to give Dr Evil one less pathway into out lives.
Consider yourselves warned.
Signing off...

Thanks for the warning James. Must admit I am also guilty of staying logged in, will make sure I change that from now on.
Regards
DavidR

James:

Not sure I follow how being logged-in to SCF would get them your password.

For example, I am not certain that logging-off SCF (or anything else) erases the SCF cookie.

Q/ Do the cookies contain a log-back-in token, or the actual password?

Q/ If they read (and decrypted a password in) your SCF cookie, did they not read (and decrypt the passwords in) all of your cookies?

If they installed a keylogger on your PC, they got everything and, again, logging-off would change nothing.

Q/ How did being logged-in to SCF expose your password ?

Cheers,

/s/ ikeyPikey

Staying logged in would not expose your password. Your password is passed once when you log in and then is not transmitted again (unless you go to your account information).

I do not believe that passwords are stored in any SCF cookie. Website passwords are typically managed by the operating system.
Don

They are stored encrypted in the DB. I cannot even tell you what you password is. All I could do is reset it for you. This is what a typical password looks like in the DB...

477c044b43bf15f1f655bd4a1324085e5trdxf9bdfec37e73e224e9c9ef489a2oenvewpw168wocxju

You do not always have to log off.

I read the entire OP now. I doubt very much you've been hacked. This scam has been going around for years.

It's from some corporate hack many, many years ago. They have the password and email you used on whatever site they hacked into over a decade ago. They send you an email to let you know they have all your passwords when they only have one from a decade ago. I would guess you use the same password most places (yeah, stop that) and haven't changed your passwords in years (yeah, stop that too.)

They have not hacked your computer, They do not know where you live unless maybe youve posted in online somewhere with your email (yeah, stop that too), they do not have video of you watching p0rn (that was what the last one I got said.)


https://www.businessinsider.com/new...tcoin-2018-7

Do as you like, gents. I'm no expert, I only know what my sources tell me. I just know it was the password for this forum they used, so I'll be more wary.

It was also a password you used years ago on another site. You can look up this scam literally all over the internet.

Yes, I got the same scam email a couple years ago. Quite common.

Why Bobby, you obviously know me better than I know myself. Thank you for your condescending and belittling response, you've certainly put me in my place. I will be sure to think twice before speaking up again.
I'll point out I never mentioned what the scam/message was about. Thanks again for assuming.
I'm done here.

I was trying to help you. I can't help it you're so sensitive. I've seen these scams for years, rarely does 2 weeks go by without me seeing one.

Hey I would like a message from you james? even if its a hoax one! ha its ok, it happens. I got someone signing into my 'uber' account in sri lanka the other day? I didnt realise I had one? needless to say I always change my passwords when this weird stuff happens. its a pain because I never remember them, but well worth it.

I lost my wallet in a Sri Lanka Uber once......

You should have called in Columbo ...

Barnaby Jones

I called in Jim Rockford. He got it back after a gratuitous car chase.