[Urgent]Mods please read!!!

[Diagnosed]

Hello, Sythe.

I have a bit of a confusing and urgent issue at hand.

I am extremely disturbed.
I know you should never change your Sythe password to be the same as your Skype, but I accidentally made that mistake last night.

The part that bothers me is that I also updated my contact information on the forums, and added my Skype to it.

MAGICALLY, today I received an email that my Skype email has been changed and I certainly did not request this update.

In other words, my Skype (Diagnosed.Owns) has been compromised. This also leads me to believe that this may have been done by a Sythe internal admin, because they are the ones that have access to the CP, and I imagine they may be able to see passwords.

This may have been done in attempt to scam users on Sythe. I have since removed my Skype from my contact information on Skype, contacted Skype Staff, and updated my Sythe password.

I have not yet gained access back to my Skype, and am hoping it has not been used to scam members of this community.

I am fairly certain I am not keylogged, as I have done all of the above through my cell phone, which has recently been formatted. Also, to my current knowledge, none of my other accounts have been compromised.

Mods/Admins: what further actions should I take to avoid any trouble on the forums? Could this have been done by a Sythe staff member?

Please help.

 

Banned you out of precaution, post a dispute from your home IP after you've secured all your accounts.

 

knew his skype was compromised or something. I had a conversation with him on skype and he was reluctant to use an MM for a trade.

Screenshot
Screenshot
Screenshot
Screenshot

Why would he ask for a thing like that?

This whole wave of hacked accounts/skypes it's kinda worrying me.

 

Hello, Sythe.

I have a bit of a confusing and urgent issue at hand.

I am extremely disturbed.
I know you should never change your Sythe password to be the same as your Skype, but I accidentally made that mistake last night.

The part that bothers me is that I also updated my contact information on the forums, and added my Skype to it.

MAGICALLY, today I received an email that my Skype email has been changed and I certainly did not request this update.

In other words, my Skype (Diagnosed.Owns) has been compromised. This also leads me to believe that this may have been done by a Sythe internal admin, because they are the ones that have access to the CP, and I imagine they may be able to see passwords.

This may have been done in attempt to scam users on Sythe. I have since removed my Skype from my contact information on Skype, contacted Skype Staff, and updated my Sythe password.

I have not yet gained access back to my Skype, and am hoping it has not been used to scam members of this community.

I am fairly certain I am not keylogged, as I have done all of the above through my cell phone, which has recently been formatted. Also, to my current knowledge, none of my other accounts have been compromised.

Mods/Admins: what further actions should I take to avoid any trouble on the forums? Could this have been done by a Sythe staff member?

Please help.

No passwords are stored anywhere. The forum software uses strong cryptographic hashing (Wikipedia this if unfamiliar). It is physically impossible for any of our staff to learn your password from the xf forum database.

That said our old forum software vbulletin used a weak cryptographic hash which is crackable with modern computers and our user database was compromised and leaked in 2014.

If you had an account then and used a weak password for that account then hackers know that password. I strongly recommend you 2fa all your accounts and use strong passwords.

I've posted a list of weak passwords in security dicussion Weak passwords | Change your password NOW if its in this list that will give you some idea of whether your password is insufficient.

Never use the same password on different sites / services. Never use a weak password. Always 2FA your accounts.