ALERT....Springer account was hacked....ALERT

[springer]

On Monday, my account with the screen name "springer" was hacked by someone who did not waste any time attempting to defraud members here on the forum.

Once the account was hacked, my location (TEXAS) , which appears under my avatar, was changed to indicate that I was from TEXAS / HK.

I have learned that the hacker responded to some want-to-buy ads and has defrauded one member of at least $4,000 for a watch via a cashiers check that the buyer mailed to the hacker at a warehouse location in Miami. I also learned from the TRF member that had purchased the watch that the hacker, at no time, used my name during the private messages the two shared. Lastly, at no time, did the buyer have a phone conversation with the hacker regarding his purchase, nor did the hacker every use my name on the check.

Based on my background and experience, I have posted threads in the past, as well as others here, regarding due diligence when making a purchase. Without rehashing this information now, my advice to everyone would be to verify the details of every purchase, talk to the seller via the phone and get a home address and phone number or anything else that would help in verifying who the seller is. Review the seller's details posted on the forum, and if his location is Texas, I would think that mailing or wiring money to another location would be a red flag.

Until my "springer" account is activated again, I will be using the "springerjp" account here on TRF. This account is only allowed 10 private messages - so, if anyone needs to get in contact with me and my PM box is full, check with timetogo, greekbum, beaumont miller, nsumner, HL65 or watchcrank who all have my contact information.

Thanks!

John (jP)

[J!m]

Wow. That sucks!

I hope the bastard dies slowly in a plane crash in the mountains...

Always: BUYER BEWARE!

[nsumner]

Sorry man, that's incredibly annoying.

Great advise regarding due diligence when making a deal, both buying and selling. This can't be stressed enough people!!! There are hackers, hijackers and alike attempting this type of thing constantly.

I'm sure the powers that be will have your old account up in no time....in the interim we'll try and not hold your noob status against you

[subtona]

Terrible. Hope it gets sorted quickly.

[AbsolutelyROLEX!]

Yes cannot say it enough, take your time and research everything you can

[gbx]

any idea how your account was compromised?

password reuse on multiple sites?? email account compromised? malware on your PC?

It can happen to anyone... I just noticed that the forum is not running with SSL by default. But you can browse the forum with secure sockets. But by default, passwords and password changes are sent in the clear.

I'm really sorry to hear this news.

[springer]

Originally Posted by gbx

any idea how your account was compromised?

password reuse on multiple sites?? email account compromised? malware on your PC?

It can happen to anyone... I just noticed that the forum is not running with SSL by default. But you can browse the forum with secure sockets. But by default, passwords and password changes are sent in the clear.

I'm really sorry to hear this news.

In answer to your question - no.

[BNA/LION]

Bummer! I hope you get everything sorted out in short order...

[sleddog]

Originally Posted by gbx

any idea how your account was compromised?

password reuse on multiple sites?? email account compromised? malware on your PC?

It can happen to anyone... I just noticed that the forum is not running with SSL by default. But you can browse the forum with secure sockets. But by default, passwords and password changes are sent in the clear.

I'm really sorry to hear this news.

Originally Posted by springerjp

In answer to your question - no.

Thanks for the making this aware John to other members, and let me add a little if I may.

Most likely the hack was due to a PM with a link sent to you (springer). That link took you to a false sign-in page where your password details became compromised after completing the sign-in. The Account was quickly closed, although unfortunately some were taken.

It does seem there is a one, or a group targeting TRF currently with these phishing PM's.
Do NOT sign in using links to this site EVER! Always use your own login portholes, whether that be from a personal favorite saved link, or a physically typed in www address you entered yourself.

Be careful, double check, ALWAYS!!

[crowncollection]

That's terrible john, some real scammers around. Glad you picked it up quickly. All the best mate


Sent from my iPhone using Tapatalk

[TempoKing]

I heard this on my "watch flippers" facebook page, I guess vetted membership
when transactions of high dollar values take place is the way to go.

[southtexas]

Wow wrong guy to hack! Sorry for your troubles jp, have a good extended weekend.


Sent from my iPhone using Tapatalk

[wadeb_21]

I'm sorry to hear that Springer. Same thing happened to me about a year and a half ago my account was hacked. I actually had a message today from user GILV (which the account now says banned) that was trying to do the samething to me. It Had a link in the message that brought me to another site that looks almost identical to the rolex forums site. Luckily because this has happened to me in the past I did not log into that site. Hope it all gets sorted out quickly and you get your normal account back.

[JohnBaker3]

Sorry for the bad vibes John....

Be safe,

John B

[ocwatching]

thanks for the heads up and getting this sorted...
I fell for a PM and immediately changed my password...saved some trouble..

[Gilv2]

Originally Posted by wadeb_21

I'm sorry to hear that Springer. Same thing happened to me about a year and a half ago my account was hacked. I actually had a message today from user GILV (which the account now says banned) that was trying to do the samething to me. It Had a link in the message that brought me to another site that looks almost identical to the rolex forums site. Luckily because this has happened to me in the past I did not log into that site. Hope it all gets sorted out quickly and you get your normal account back.

This is the real gilv. I'm now Gilv2. Sorry this happened as obviously my account was hacked! Thanks to Sohail for quickly bringing it to my attention. Thankfully no damage appears to have been done to the fine, honest members on this forum.

[subtona]

for clarification.

Often, An account being hacked is not something that happens to someone.
It is something that we interact with, ie our own action completes the hack.

As stated above in many cases, volunteering our sign in info to the bogus sight or clicking on a link that is more than it appears...

The tricks our many and if our guard is let down or we are distracted for a moment, it can happen.

[Ed Rooney]

Originally Posted by subtona

for clarification.

An account being hacked is not something that happens to someone.
It is something that we interact with, ie our own action completes the hack.

As stated above in many cases, volunteering our sign in info to the bogus sight or clicking on a link that is more than it appears...

The tricks our many and if our guard is let down or we are distracted for a moment, it can happen.

I disagree. It is quite possible to have an account hacked through no fault of your own. A user can have an account of the same name, as many of us do, on another forum that is not completely parched and secure. A hacker can take advantage of a vulnerability on say, watchderpsforums.com, and then use that info on this forum. Until the forums use multi-factor authentication, stuff like this will happen.

[subtona]

Originally Posted by Ed Rooney

I disagree. It is quite possible to have an account hacked through no fault of your own. A user can have an account of the same name, as many of us do, on another forum that is not completely parched and secure. A hacker can take advantage of a vulnerability on say, watchderpsforums.com, and then use that info on this forum. Until the forums use multi-factor authentication, stuff like this will happen.

Agree there are more sophisticated hacks possible.


I only mean to highlight the occasion that many (majority?) of the hacks are had through deception and as a result we often participate in our own hacking.


something similar was mentioned with regard to Facebook, Zuckerberg needed us to hack ourselves.

Intent is just to point out that we all need to have a heightened sense of awareness when it comes to any emails we receive. And have a reflex to not blindly click in a link because the subject is enticing or sounds urgent.

[Ed Rooney]

Originally Posted by subtona

Agree there are more sophisticated hacks possible.


I only mean to highlight the occasion that many (majority?) of the hacks are had through deception and as a result we often participate in our own hacking.


something similar was mentioned with regard to Facebook, Zuckerberg needed us to hack ourselves.

Intent is just to point out that we all need to have a heightened sense of awareness when it comes to any emails we receive. And have a reflex to not blindly click in a link because the subject is enticing or sounds urgent.

Agreed. The click reflex needs to be suppressed.

We had my entire company do mandatory cyber security training, and still caught people giving up their passwords and stuff the next day.

[HL65]

Originally Posted by wadeb_21

I'm sorry to hear that Springer. Same thing happened to me about a year and a half ago my account was hacked. I actually had a message today from user GILV (which the account now says banned) that was trying to do the samething to me. It Had a link in the message that brought me to another site that looks almost identical to the rolex forums site. Luckily because this has happened to me in the past I did not log into that site. Hope it all gets sorted out quickly and you get your normal account back.

That is exactly who hacked John as well as some others here including Govbergjewelers. I banned Govbergjewelers today. The email belonging to the hacker is: el.wayne@yandex.com

John glad all is sorted out and you are back with no issues!

[stockegsix]

Saw a post today from Govbergjewelers 30 minutes into the ad and manage to get a PM in and a reply from scammer as well.

I almost fell for that 1680 this morning... I sent a text to govberg and got a reply. Yes, I am playing along via email.

me: "Interested in the 1680, is that the right price?"

scammer: "$3000 is the price. Send me an email to el.wayne@yandex.com"

me: "OK, how do you want the payment sent?"

scammer: "We accept bank wire/ cashier check."

me: "Do I make the check to govberg jewelers? Regards"

scammer: "No, make the check payable to our stock warehouse in FL.

Payable to: Conexion Turismo.
Delivered to: Jason Guell
8115 nw 74th ave
#50616814
Medley, FL 33166
Phone: (305) 591-7507
Make sure it is a certified cashiers check you send. Will overnight the watch to you one we receive the check.

Thanks -
Jason "


Well we can start with this information here. Be safe guys, if its too good to be true... it probably is. Thanks.

[QueueCumber]

My Stub Hub account was hacked once. The hacker bought Broadway tickets with it. Stub Hub refunded the money. I was surprised they didn't make any effort to catch the person. I mean, at least send someone down to the show to see who bought the tickets and question them...