Turnintocash.com has been hacked! Addresses are all over the net!

chrisvaldez

After some shocking reports of some emails this morning from Rob @ Turnintocash.com, which consisted of the following:

"Hi There turnintocash customers,

Unfortunately all of your username/password/full address details have been leaked on the internet for all to see. we are sorry about this..

http://pastebin.com/Pc6uhjcu

Hope you don't mind - Have a great new year.

Rob@turnintocash.com

Rob xx"

I did some checking....his website has indeed been hacked and people who have sold their media to the website may find their details have been posted up for all to see.

I must say that, not only is it shocking that the website is that unsecure, but the casual nature of the email that has been sent out is appalling.

If you've bought or sold to this website recently I would check the link to see if your details were amongst those leaked. Thankfully, mine aren't, but the saga of turnintocash.com seems to be getting worse.

geordie_joe

chrisvaldez wrote: »

I must say that, not only is it shocking that the website is that unsecure, but the casual nature of the email that has been sent out is appalling.

I think you'll find the email came from the person/people who hacked the site and not from Rob himself.

chrisvaldez

That's interesting, so whoever leaked the details must have sent a spoof email claiming to be from Rob!

traceyr

The email I got cam from the email address [EMAIL="2badfootball@gmail.com"]2badfootball@gmail.com[/EMAIL] so I would imagine it is from whoever has hacked the site. Disgraceful!

geordie_joe

chrisvaldez wrote: »

That's interesting, so whoever leaked the details must have sent a spoof email claiming to be from Rob!

Yes, there's no fun in hacking a site and posting people's details on a web site nobody has ever heard of, or visited, unless you actually tell them it's there.

doink

They shouldn't be storing the passwords as plain text, it's always possible that any website can be compromised, passwords should be stored in a one way encrypted format because of this.

crass

The site has terrible security!

I hope the users of the site used different passwords for each website otherwise they are going to be stuffed.

Using the same username and password combination on multiple sites is one of the dumbest things you can do on the internet for this very reason.

Please please, if you ever used this site go change all your passwords NOW!

chrisvaldez

Well the good news is that Pastebin have taken down the page.

redfrock

Thank you for the update. I had registered with the site to sell some items but had yet to do so. I had not logged my address with them but my email address and password had been hacked. I have sent a steaming email to turnintocash.com, will not be using them and have demanded they delete my account. I didn't ever receive the email to say my details had been hacked but picked up about it from here and checked the link

geordie_joe

chrisvaldez wrote: »

Well the good news is that Pastebin have taken down the page.

And the bad news is the hacker still has the data and post it on any one of a million web sites if he/she chooses.

And just to make matters worse, if you do a google search for "details have been leaked on the internet" (including quotes) guess what site is top?

So other would be hackers/criminals could now have a copy of the data.

chrisvaldez

Well hopefully they will find out who did it and take legal action against them. Not that I think turnintocash.com will be that worried...