Phishing sites

We've currently been getting or had reports of people receiving PMs that direct them to a link on the sythe forums. This link however doesn't ACTUALLY go to a topic on the sythe forums, it directs them to a website that will steal your username and password. Although the text may appear to be a www.sythe.org link, we encourage people to look in their browser URL to ensure they are logging in on sythe.org and not another site.

This is an example of a PM showing a topic that looks like it's sythe.org but really goes to a phishing site.



Thank you Drunken for taking the image.

If you see the login screen make sure you are on www.sythe.org in your browsers address bar BEFORE entering your login information.

If you have been to this site please change your password ASAP because you will be held responsible for anything done on your account.

Thanks

~ EDIT BY WS

WATCH OUT FOR THE E-MAILS!

 

this happened to me, and i didnt notice, and i thought it was a bit fishy so i changed my pass within seconds of going on it, then he asked if i looked on the same link again, as he musnt of got my password, so i must of changed it in time lol

 

Someone sent me a pm Saying i want to trade accounts, as i had a account up for sale, and it sent me to that page but it didn't open so i just wanna say thats not the only way the message shows up.

 

yea got someone banned cuz of this, i also recieved a PM from someone else about this site

 

Hopefully we can get the link censored soon.

 

all i have to say is, lol at phishing sythe.

usually it will be aimed towards more trusted accounts, but everyone needs to be careful seeing how they can use any account.

 

Here's a few tips:

1. If you've gone to the site and don't know if you were phished or not, wait about 3 hours, and go through your outbox looking for messages you haven't sent. This just seems to be an attempt to get as many sythe members as they can phished. Enough passwords, and plenty of accounts will be lost.

2. If you go to the site, put in random data, it logs you into sythe like normal. So it seems valid, it also redirects you to sythe.org. So you can enter any information, and it will redirect you to sythe.org, logged in on your account. This is because it uses cookies for your information.

3. DO NOT SET UP AUTO LOGIN. LOG OUT, AND ALWAYS LOG IN WHENEVER YOU VISIT THE SITE! I know many of us prefer to just come here, and not bother logging in, but if you log out, and log in every time, there is LESS chance of you being a good target!

4. Report everyone that attempts to phish. They aren't doing it on purpose, but it needs to be fixed, and stopped at all sources before it gets too far!


That's all I got =/.

 

If you set up remember me, then they cannot get your password. But make sure you are on the actual site, before doing so.

If you log out every time, then you have a higher chance of getting your account stolen, since you type in the info all the time.


Overall, just make sure the web addy says this : Www.sythe.org

 

I've also found two of these phishing sites, and had the users banned, and requested an IP ban.

When I checked the IPs, the users were sharing the same IP.
I expect it is the same person/'organization' distributing the PMs/links.

 

I have got one of these as well, just like 20 minutes ago lmao.

 

yeah, i keep getting some from these stupid fucking ****** leechers. it is pissing me off. it showed up as www.**********.com?

 

That's where you're off. See, there's a difference between KeyLogging and Hacking. What they are doing is attatching to cookies, and using that data.

If you're keylogged, you're right, more risk there, but since they're using the cookies for their hacking, they're getting data that's being taken from the database.

Yes, make sure the web addy is that, but like I said, don't stay logged in when you're not around. Log out when you leave... etc.

 

I got 2 of those messages 1 involes Shredder (Fake shredder of course) and one doesn't =P

 

If you look at the source of the flash form, and the page you'll see that it only requires people to enter in the data to get your passwords. It can't steal cookies just from viewing it.

It uses the coffeecup form builder =( whoever did it couldn't even make their own page and had to use a pre-built one.

 

i went there and i got 404 error or somethign forgot

and the adressbar was

*****

do i still have to change my p.w/?

 

If you didn't enter your password on the site you shouldn't need to, but it never hurts to be on the safe side.

 

It's because that website has been censored.

 

Ya, I got one of these, too. A guy messaged me complaning about how he keeps getting spammed by people asking for free accounts and he's willing to pay me $20 to tell him how to stop them. Then he included the "link to the spam".

 

Its the same site again (<censor>-login.co.cc) thing.

 

Do not trust any emails, since it is possible to spoof them. If we need to make an announcement we will do it VIA the website.