Would you like to play a game?
No. No, I would NOT. EVER.
I was perusing my email when a familiar “ding” caught my attention. An alert stating that I had requested an email change to one of my shopping app accounts. As you have probably already guessed, I did not. It was WISH. DON’T JUDGE.
Naturally, much of my info, money stuff, addresses, blood types and collected souls were connected to said email. I opened the letter and it so politely showed me the email it wanted. It was basically:
ima_hacker @ uvbeenhacked.xyz
I kid you not. It was THAT obvious. The cherry on this dessert was this: The email stated that another email was sent to the NEW address and for me to click on CONFIRM.
…
Now, I’m no MENSA candidate here – but if you want to ensure that I wanted the change, wouldn’t you send the confirmation link to, oh, I don’t know, THE ORIGINAL EMAIL?
I spent 24 hours calling banks, changing passwords, changing passwords again because I forgot the password I changed it to and I also changed passwords a third time because … well … like I said, no MENSA candidacy here. Oh, and running AntiVirus and Malware detectors a few times.
I was perusing my email when a familiar “ding” caught my attention. An alert stating that I had requested an email change AGAIN to THE SAME shopping app account. This one was Russian. Since I had already changed everything etc etc etc. I just let it sit. I pretend I have a Russian pen-pal and look at said email now and again. DON’T JUDGE.
Oh, Hai Vladimir! I am fine! Thank you for asking! How are you?
A strange game. The only winning move is not to play.
Holy smokes! I’m so sorry this happened to you! I’ve had fun times with strange binary buddies as well; discovered several unknown’s piggybacking a Roku channel. Said, “Buh bye, dudes.” Furiously changed passwords (several times ‘cause no MENSA candidate here either) and…yeah. It’s no fun. No fun at all! Vlad better leave you alone, dagnabit!
Recommended practice: use a password keeper! It allows you to keep unique, strong passwords for every account. You only need to memorize one master password. That way, if an account gets compromised, you only need to change ONE password. The one I use is 1Password.