MySwag.org The Off-road Camper Trailer Forum
General => General Discussion => Topic started by: paceman on April 29, 2016, 01:59:30 PM
-
hi all,
i just received the following email below, informing me that Gumtree was the victim of a hack recently.
might be worthwhile changing passwords and keeping on the lookout for scam emails, etc...
news article appears to confirm its not a hoax:
https://au.news.yahoo.com/thewest/wa/a/31469695/gumtree-accounts-hacked-in-mass-attack/
email information below:
-------------------------------------------
We are writing to let you know that some of your Gumtree account information was compromised in a security attack last weekend. The attackers accessed your email address. Contact names and phone numbers, which are made publicly available on the site if provided, were also accessed.
Your Gumtree account password was not accessed. Payment details were also not compromised; we don't store any payment information on our site.
We resolved the isolated attack within minutes of discovering it and since then we've taken extra steps to protect your information.
We encourage you to follow the tips below to help protect yourself from scam and phishing attempts:
1. Watch out for phishing scams: Phishing scammers use fraudulent emails or SMS to trick users to access fake websites or share personal information in the hope of accessing private account or login information. You can find more information about phishing scams here.
2. Keep your account details secure: Choose usernames and passwords carefully and don't use the same sign-in information for more than one online account.
3. Spotting a fake email: Fake emails can include a company logo and will usually ask you to reply to the message with confidential information or ask you to change a password. They may even include an attachment. Gumtree will never send you a link to change your password unless you click the ‘Forgot your password' option on the site.
4. Reporting fake emails: Please report suspicious emails which you don't think are from Gumtree. Simply forward to spoof@gumtree.com.au so we can investigate and de-activate any fake site links. Do not click on links or take any other action requested in those suspicious emails.
The safety of our community remains our number one priority and we apologise that you've been affected by this. For more information about staying safe online, visit Gumtree's Scam Security Centre.
If you have any queries about this email, please contact us here.
Sincerely,
Gumtree Australia
-------------------------------------------
-
Sucks that it happened, it is inevitable, but good on them for quickly informing their customers about the breach, including telling you what was compromised and what wasn't.
-
Sucks that it happened, it is inevitable, but good on them for quickly informing their customers about the breach, including telling you what was compromised and what wasn't.
agreed... that's all you can do. no security is perfect these days...
-
I have multiple items listed at the moment and havnt recieved any such email. maybe this is a scam in itself.
-
maybe this is a scam in itself.
I doubt it
http://www.news.com.au/technology/australian-gumtree-users-targeted-in-hacking-attack-with-personal-details-stolen/news-story/56034ebce5c54a0d21aa4d5bce711ed2 (http://www.news.com.au/technology/australian-gumtree-users-targeted-in-hacking-attack-with-personal-details-stolen/news-story/56034ebce5c54a0d21aa4d5bce711ed2)
-
I received the same email...but as a precaution I didnt click on any of the links within the email!
-
I received the same email...but as a precaution I didnt click on any of the links within the email!
Ditto, as I don't even have an account!
-
I received the same email. Just change your password.
Sent from my SM-G920I using Tapatalk
-
Hmm I have a Gumtree account but didn't get any emails...?
sent from Earth via tapatalk
-
We got one and dont have an account with them either :laugh:
-
Hmm I have a Gumtree account but didn't get any emails...?
sent from Earth via tapatalk
Same here
-
Hmm I have a Gumtree account but didn't get any emails...?
sent from Earth via tapatalk
Same here no email
-
We got one and dont have an account with them either :laugh:
easiest way to cash in for the arsehole hackers.... send out a dodgey email with spyware/etc in the email link...= everyone fufkced
-
easiest way to cash in for the arsehole hackers.... send out a dodgey email with spyware/etc in the email link...= everyone fufkced
It wasnt a dodgy email though was it, as it was reported in the mainstream media (Yahoo, West Australian etc) that the site had been compromised?
seems strange though that peole without accounts are receiving the same email.. perhaps they had an account previously?
-
My bet is the the email you received was indeed fake, and that about 5% of people that received it clicked on the link, therefore divulging information (email address & a password to a scam).
I have 3 x gumtree accounts, and didn't receive any emails.
Ninemsn, Yahoo, Dailymail, etc, just pick up stories from each other with very minimal fact checking, and commonly pubish $hit.
You only have to watch an episode of Media Watch on the ABC to see the cr&p that these online 'news' sites publish!
-
My bet is the the email you received was indeed fake, and that about 5% of people that received it clicked on the link, therefore divulging information (email address & a password to a scam).
I have 3 x gumtree accounts, and didn't receive any emails.
Ninemsn, Yahoo, Dailymail, etc, just pick up stories from each other with very minimal fact checking, and commonly pubish $hit.
You only have to watch an episode of Media Watch on the ABC to see the cr&p that these online 'news' sites publish!
a reputable IT-based news site is also reporting it...
http://www.itnews.com.au/news/gumtree-hacked-user-details-stolen-418819 (http://www.itnews.com.au/news/gumtree-hacked-user-details-stolen-418819)
and i doubt that news sites would just publish that a well-known online company was hacked when it wasn't, with the threat of defamation lawsuits hanging over everyone...
in the articles already published, it is clear that not all gumtree members were affected, hence the reason why all might not have been notified.
either way, a timely reminder to be careful with your account details for all online sites...
just trying to help... :)