Important Please Read: Hacked accounts

[Tony L]

I’ve had two reported tonight. Reddish75 and PeterVid. Both hijacked by scammers looking to place bogus adverts. Both now returned to their owners.

I don’t think the accounts have been hacked here, more likely common usernames, passwords and email addresses in another leak somewhere. This is very common.

Anyway, we are at two now. If I get another report I’m going to lock the whole classified area for a while until I have figured out exactly what is going on and where the point of failure is.

If you have reused a password from elsewhere on pfm please change it now. In fact changing your password now regardless would be a good move.

 

[AV8]

In fact changing your password now regardless would be a good move.

Done, thanks for the headsup Tony

 

[flapland]

Also done. Thanks Tony.

 

[Sloop John B]

Ditto, I also use the 2FA which I’m grateful is available on PFM as Roon does not have 2FA.

.sjb

 

[PhilofCas]

Thanks Tony

 

[Mynamemynaim]

A safe forum is a happy forum

Thanks Tony

 

[Tony L]

I’ve now confirmed both hacked accounts were using passwords that were also used elsewhere, in fact both have had issues across multiple sites. As such I’m pretty confident the hack wasn’t here. Even so please ensure you use a unique password here.

 

[AudioAl]

Just changed my PW , thanks for the advice.

 

[unclefz]

Thanks for your vigilance @Tony L , PW changed too.

 

[Tony Lockhart]

Changed, to a unique one suggested by my iPhone.

 

[chartz]

Done.

 

[gustav_errata]

Ditto, I also use the 2FA which I’m grateful is available on PFM as Roon does not have 2FA.

.sjb

Yes, I think, because there is a classifieds section here, everyone should enable two-factor authentication (click your username in the main menu bar at the top and you'll see it in the vhig list of options).

If others here are not familiar, it's a minor ballache as you'll need your mobile and an authenticator app (eg Google Authenticator but there are many) to generate one-time login codes (on top of the usual username + password). But you can choose to only have to do it once per month, which is a decent compromise. Anyway, then even if someone figures out your password they still won't be able to log in without the 2fa time-limited code.

 

[Seeker_UK]

Changed. Thx @Tony L

 

[Rockmeister]

cheers, done.

 

[Nick_G]

Thanks Tony. Done this morning.

 

[julifriend]

Even though I use a complex and unique 17 character password, I have changed it and enabled 2FA.

 

[Paul L]

It looks like I have forgotten my current password, is reset possible without it?

 

[Jamie]

It looks like I have forgotten my current password, is reset possible without it?

Is it stored by your Google account (Google password manager)?

 

[kevinrt]

I activated 2FA yesterday on my iPad and all was well, but when I tried to log in to pfm on my iPhone I just kept being bumped back to the log on screen every time I entered the log in verification code that I received via email.

Anyone else encountered this and have a solution?

Kevin

 

[Tony L]

Try clearing the cache on the phone and logging in again from scratch.