PLEASE READ New Scammer Risk

[Forum Boss]

NEVER Post your EMAIL or PHONE Number in a Public Post or Member Profile page.

A vendor Rep had his Accurate Forum account compromised yesterday, we believe through a password hack. We have now closed that account.

The scammer sent out multiple PMs offering products (stock, optics, brass) for sale.
The scammer was requesting money to be paid by PayPal F&F or Venmo F&F.

This same scammer has been operating on multiple other hobby boards, including TheGearPage.net.
It appears he has hacked multiple vendor accounts in various groups.

Beware if you see any of these email address in a sale request:

mandrellrobert027@gmail.com
mandrellrobert027@hotmail.com
mtgoeventtickets@gmail.com

Folks, for the Nth time, be aware that hacking and scamming is happening ALL the time.
Never Ever do ANY deal without a Voice Phone Call. VOICE!! Pick up the Phone and Talk.
And DEMAND custom photos.

NEVER do ANY payment with PayPal F&F or Venmo F&F or Zelle or CashApp.

If someone asks for F&F payment, try to get their name, address, and phone number and notify Forum Boss.

NEVER pay a payment EVER using F&F -- Consider it "Fraud to F with You".

If you are using a same/similar password with another Forum or website, CHANGE YOUR PASSWORD right now.

 

[Big Mc]

A vendor Rep had his Accurate Forum account compromised yesterday, we believe through a password hack. We have now closed that account.

The scammer sent out multiple PMs offering products (stock, optics, brass) for sale.
The scammer was requesting money to be paid by PayPal F&F or Venmo F&F.

This same scammer has been operating on multiple other hobby boards, including TheGearPage.net.
It appears he has hacked multiple vendor accounts in various groups.

Beware if you see any of these email address in a sale request:

mandrellrobert027@gmail.com
mandrellrobert027@hotmail.com
mtgoeventtickets@gmail.com

Folks, for the Nth time, be aware that hacking and scamming is happening ALL the time.
Never Ever do ANY deal without a Voice Phone Call. VOICE!! Pick up the Phone and Talk.
And DEMAND custom photos.

NEVER do ANY payment with PayPal F&F or Venmo F&F or Zelle or CashApp.

If someone asks for F&F payment, try to get their name, address, and phone number and notify Forum Boss.
Thanks Paul.

 

[rijndael]

@Forum Boss - Why don't you require 2 factor authentication for logins? It would solve most of these compromised account issues, specifically ones where the same password was used on multiple sites.

 

[hogpatrol]

PSA: Below is an example of a generated password by Norton and the type I use. YMMV.

yACRa7OsWoT5#b@*@*TI
Strength: Strong

Time needed to crack the password
More than the age of the universe

 

[rijndael]

You can have a 100 character password, using every character possible, and if it was compromised on another site and posted online, and you share them between sites, you're still screwed.

If you use 2 factor authentication, they can have your username and password, but if they don't have your email or phone, they can't get in.

 

[jelenko]

Yeah. Two factor is unbreakable unless they have your second factor - but they have to be able to get it from you.

 

[rijndael]

Yeah. Two factor is unbreakable unless they have your second factor - but they have to be able to get it from you.

SMS as the second factor isn't unbreakable, but it's a whole lot better than nothing. We really need end to end encryption in SMS.

There are attack vectors from the mobile network side. It's called an SS7 attack, and it's why there's a move away from SMS and more towards 2FA apps, like Authy. There's also an issue for rogue cell towers, especially in non-US countries. It's also an issue if you turn on your cell phone around the airports (as you land ...). Near-Airport rogue cell towers are common because they catch so many people, they're also common in enemy countries because it's state owned. Then you have baseband hacking stuff, but that's a bit too deep for this...

Here's a 14 year old video on this:

 

[Mastershot]

I used to own a internet business, hackers could crack anything on passwords. What they need to do is limit the number of attempts at login and maybe add text response to a cell phone to allow in.

 

[Buttstock-TX]

Two-factor via Symantec VIP on a cell phone is very secure. That said, I realize it would most likely increase the cost to operate the website.

 

[rijndael]

There is zero chance I’m loading anything by Symantec on my phone.

There’s no reason to tie two factor to any one vendor.

 

[oldman1951]

Sold, but not cashed yet! Thank you sir!

 

[Krogen]

2FA is a step in the right direction. However, there's a risk with 2FA by text instead of an authentication app. Yesterday I learned from @Big_Daddy that these cretins can pilfer e-sim information from your cell phone. Then they clone your phone so the 2FA text goes to the phone in their paws. Suddenly, your 2FA is a is in their control. Apparently one can lock e-sims against transfer to prevent this. It seems it's easy enough to find and lock on Verizon's website, but not so on AT&T. Does anybody know how to lock e-sim transfer on AT&T?

 

[LVLAaron]

Please god do not recommend symantec VIP.

TOTP is the correct modern answer for two factor.

 

[Bc'z]

The simplest answer is for folks to use thier head for something other than keeping thier ears evenly spaced.


Forum Boss: I am still not aware of one Forum member who has lost ANY money in a Forum classifieds transaction who actually picked up their phone and talked to the seller by VOICE on the telephone.

Folks — Do Voice Calls and demand custom photos.

 

[D-4297]

Doing second transaction today with another Forum member . Sent a PM with contact info , and he returned my PM in a few minutes with full info .
Just follow all the Bosses suggestions , and there are no issues . Like it's always said , if it sounds to good to be true , IT IS !

 

[shoot4fun]

I actually like the phone call before completing any deal here. Not only do I have piece of mind (important) BUT ( more importantly) I have wound up having a real conversation with most of them and, dare I say, we have become friends.
This forum is of great importance to those who wish to share information, experiences and anecdotes.
My twenty year tenure here has been nothing short of amazing. I've learned so many things, mostly worth keeping in my toolbox, and met so many great people.
The scammers are everywhere! They have oozed their way into our lives through technology and are constantly improving their nasty little games. It is first and foremost that WE don't allow them to win!