Someone tried to log into my user account 5 times and was disabled

[mdsjohna]

Got an email about it that looks legit. Just wondering if someone might have got my user name from a forum post? I went ahead and changed my password. I haven't been on the site in months. Anything else I should do?

[Vayku]

Hi,

Please make sure your System is not infected. I highly suggest you to download MBAM from https://www.malwarebytes.org/
Once downloaded you could activate the real time scanner, but for a quick scan just don't enable this trial.

Also in case you have a mobile phone Android/IOS download a Authenticator from blizzard to max security.
If your using a password for alot of the same things and lets say a Forum would be compromised and data is leaked with passwords this might be a problem.

I hope you sort out the problems,

Vayku

[thelastjay]

Same thing happened to my account fyi.

[luxlunae]

Like your db.com accounts? What possible value would that have?

[whitefall]

I got this today as well. I logged in after the 15 minute cooldown and made my password more difficult just in case.

Maybe it's a forum spammer trying to get accounts to post on? I don't recall any posts on here so someone may have a user list.

My account has been around a while but I just used it to surf the forums for dual boxing info, setup and tips.

[Ughmahedhurtz]

My guess is script kiddies from EVE, or a generic forum scraper/hackpost bot.

[JackBurton]

posters with < 2 total posts trigger my spidey scense

[JohnGabriel]

How'd he sneak a link in there? I remember when I first joined took months before I could post links.

[Khatovar]

Links were reallowed a while back because there were too many complaints and spammers moved away from post spamming for the most part anyway. Now they are all blog spammers, which is why blogs didn't work right for a while. At this point the forum software prevents a large portion of spammers from even registering and I physically go through new registrations every morning to weed out whatever might get through.

Most of these users with single-digit posts are old registrations, seen from their join date under their name. Malwarebytes is a perfectly common security tool, suggested often on these forums and listed in the Newbie's Guide as a suggested application. There is zero reason to treat posters like they are suspicious simply because they don't have many posts. They are taking the time to report a potential security issue here when they aren't even regular posters. They could have come here and started screaming, cussing, threatening etc or ignored the issue altogether leaving us in the dark.

So thank you mdsjohna, thelastjay and whitefall. I don't have anything to do with the actual make-forum-work stuff but I'll drop a word and make sure the right people have seen this, since the early posts did leave it vague that we're talking about DB accounts, not WoW accounts.

[zenga]

Well not only posters with a couple posts seem to have this issue, got a mail as well:



date:
Sun, Mar 15, 2015 at 12:37 PM


subject:
Account on Dual-Boxing.com locked out



just FYI

[Vayku]

Links were reallowed a while back because there were too many complaints and spammers moved away from post spamming for the most part anyway. Now they are all blog spammers, which is why blogs didn't work right for a while. At this point the forum software prevents a large portion of spammers from even registering and I physically go through new registrations every morning to weed out whatever might get through.

Most of these users with single-digit posts are old registrations, seen from their join date under their name. Malwarebytes is a perfectly common security tool, suggested often on these forums and listed in the Newbie's Guide as a suggested application. There is zero reason to treat posters like they are suspicious simply because they don't have many posts. They are taking the time to report a potential security issue here when they aren't even regular posters. They could have come here and started screaming, cussing, threatening etc or ignored the issue altogether leaving us in the dark.

So thank you mdsjohna, thelastjay and whitefall. I don't have anything to do with the actual make-forum-work stuff but I'll drop a word and make sure the right people have seen this, since the early posts did leave it vague that we're talking about DB accounts, not WoW accounts.

Thank you Khatovar,

I used to only read the forum once so now and then, so never felt like registering at first. Thought I might leave a response for this user so I did. Though I do know why it might have looked suspicious at first but as stated Malwarebytes is often suggested as it simply provides a scanner without Realtime scanning.

[rfarris]

...Malwarebytes is often suggested as it simply provides a scanner without Realtime scanning.

Only in the free version. If you contribute to the developer it converts to a full-featured product.

[Vayku]

Only in the free version. If you contribute to the developer it converts to a full-featured product.

I know, that is what I stated in my first post.

[mylosol]

I think this is a brute force attack on the site or a complete error because I got the same email, I haven't been on here in 5+ years and anyway why would someone want to hack my dual-boxing.com account? They could just create their own.....

[MiRai]

I think this is a brute force attack on the site or a complete error because I got the same email, I haven't been on here in 5+ years
Perhaps it was a sign that you should start multiboxing again. :)

[JohnGabriel]

I feel left out. I didn't get one.

[Dawnstrider]

I just got the same thing. Haven't been here in several years and never been to this site on my current computers until now so I do not think they got my username from a breech on one of my machines. Just a heads up.

[mbox_bob]

Yay, the rebirth.

Anyway, I usually get these where some other person is coming along and wanting to use my cool username, well, because it's cool (actually this one isn't, but some others are), and when they find it in use, they go,

"Mmm, I've used this username elsewhere, maybe I'm already registered here. I know, I'll throw some old possible passwords at it and see what happens.... mmmm, nope, no worky, better sign up again".

Anyway, I could sign up to every website in the world, but that seems like hard work. I wish I could copywrong my usernames so no other could use them, but there does not seem to be a service for that. Maybe I should pitch it to Larry or Brin..

[Dasana]

Just had the same thing happen to me today. Couldn't tell you the last time I was here.

[Fat Tire]

Same

[Djawol]

Same here