IMPORTANT! Have you received an email to your forum username?

col97

I received the email too . .....A few years since joined or posted for that matter.

Grunhilda

I received one too. I'm pre 2010

mandarinduck

Yep, me too

Lokolo

I haven't got one

Former_MSE_Webmaster

Hi folks,

Just to update you on the situation.

The mail is definitely malicious spam and the link it contains leads to a trojan so please DO NOT CLICK THAT LINK!

The content and sending address are false (spoofed). The e-mail did not come from and has nothing to do with Moneyexpert or defaqto, their name has just been used to give the e-mail some sense of legitimacy.

We are still investigating how the e-mails were sent to so many of our users but we've found no obvious breach at this stage. We'll let you know more as it comes to light but it's entirely possible that the e-mails being sent to right now were harvested during a breach that happened last year. Please see this post for more detail.

If any recent joiner has received one of these spam e-mails, it would help us greatly if you could post here and let us know.

Thanks for the feeback and sorry for the hassle folks.


Webby

mr_fishbulb

MSE_Webmaster wrote: »

We are still investigating how the e-mails were sent to so many of our users but we've found no obvious breach at this stage. We'll let you know more as it comes to light but it's entirely possible that the e-mails being sent to right now were harvested during a breach that happened last year. Please see this post for more detail.

Can you confirm how our account passwords are stored by the site?

I.e. plain text, hashed, salted & hashed. What is the hash size?

Tigsteroonie

Just checked my registration email account, and also ButterBean's email account, and I can't find that we've received this (not in Inbox or Spam). Both of us are pre-summer 2009.

BenL

Yes, same dodgy e-mail received today addressed to my user id from here. I'm an early signup (2004) to the forum and no v-card option ticked.

TDyl

<quote>
Hi,

I had an email pop up in my gmail account today from moneyexpert.com which used my nickname from these fora.

I was very surprised, to say the least, that my nickname and email addy had probably been harvested, but the biggest worry I had was that the email encouraged me to download a "news tool" from a Norwegian ccTLD in a zip format.

I have never subscribed to moneyexpert.

Does anyone know if this is a scam?

TIA
TDyl
</quote>

Since writing that and being directed to this thread I have come to the conclusion that I must have had my details skimmed from this site, the coincidence is too obvious.
TDyl

EDIT:

I rang the 019nnnnnnnnn number as listed on the moneyexpert.com website and the girl I spoke to knew nothing of the email and said "if you don't think the tool will be of use to you then don't dl it". She seemed quite nice, but appearances, even vocal ones, can be deceiving.
TDyl

Tibbledom

I've received the email also. Signed up in October 2008 addressed to this username which I don't currently use

I haven't had an email to the username I (openly) switched to in February 2009