READ THIS ***NSX Prime User Accounts With Weak Passwords Hacked!*** READ THIS

[Honcho]

Folks-

We've now seen two instances of Prime members accounts being hacked and used to list expensive parts for low prices. Please take the time to go into your account and change your password. If you find that you are locked out of your account- make a new temp one and post in this thread. I will PM you and reset your account.

Honcho

 

[NZNick2]

Hi Honcho, I seem to be locked out of NZNick. Not sure if it connected with the above, but I can’t access my original account for some reason,
Cheers!

 

[centerpunch]

After reading this, I went to change my password. I was already logged in, but when I tried to change my password the system wouldn’t accept my existing password to let me change to a different one.

So I logged out, then clicked log in, said I forgot my password, entered my email address, and it sent me a link where I successfully changed to a new password.

 

[JLCoolman636]

Hi Paul,
My JLCoolman account was one of the accounts that was compromised and used to try and scam people today.
-jason

 

[Honcho]

Just a quick update. After speaking to the Xenforo support team, we were able to confirm that the site itself was not compromised. Instead, it appears that the hacker(s) compromised a few individual accounts with weak and/or shared passwords. Thus, I STRONGLY recommend that Prime members change their password to something strong and don't use it anywhere else.

Honcho

 

[ofdlt10]

thanks for the heads-up! changed mine last night

 

[JLCoolman]

Unfortunately, looks like a member fell prey to my compromised account.

My friends started messaging me yesterday about it and I tried to address it as soon as I could. @JohnWayne reached out to @Honcho and that's when I believe the fake "for sale" threads were removed and my account suspended.

Hopefully the member can cancel the payment and/or recover their money somehow.

I have reached out to/informed @Honcho of this situation and asked him to reach out to the member as well.

I apologize from the bottom of my heart that this happened, as I'm an avid and fiercely loyal member of the NSX community.

Also, hopefully no one else was somehow indirectly affected while my account was compromised.

Very respectfully,
-jason

p.s. the member asked me to remove/edit his username from this post for the time being.

 

[e9coupe]

Just a quick update. After speaking to the Xenforo support team, we were able to confirm that the site itself was not compromised. Instead, it appears that the hacker(s) compromised a few individual accounts with weak and/or shared passwords. Thus, I STRONGLY recommend that Prime members change their password to something strong and don't use it anywhere else.

Honcho

I try to get the members of my forum to use strong passwords but as human nature goes, the ones who don't really care won't change or don't use their account often enough to follow through. Same goes for two-step verification. You can offer it as an option for users but the only way to make it work for the whole site is to make it mandatory.

 

[Honcho]

I try to get the members of my forum to use strong passwords but as human nature goes, the ones who don't really care won't change or don't use their account often enough to follow through. Same goes for two-step verification. You can offer it as an option for users but the only way to make it work for the whole site is to make it mandatory.

I am considering making it mandatory, in light of all this.

 

[nis350]

Unfortunately, looks like a member fell prey to my compromised account.

My friends started messaging me yesterday about it and I tried to address it as soon as I could. @JohnWayne reached out to @Honcho and that's when I believe the fake "for sale" threads were removed and my account suspended.

Hopefully the member can cancel the payment and/or recover their money somehow.

I have reached out to/informed @Honcho of this situation and asked him to reach out to the member as well.

I apologize from the bottom of my heart that this happened, as I'm an avid and fiercely loyal member of the NSX community.

Also, hopefully no one else was somehow indirectly affected while my account was compromised.

Very respectfully,
-jason

p.s. the member asked me to remove/edit his username from this post for the time being.

Sorry to hear that. Were the fake sales for a set of headers and wheels? Any idea how your account was hacked?

 

[Honcho]

Folks-

A Prime moderator's account (Drmanny) was hacked and he has been infiltrating the sale ads posing as Shawn. He also deleted the original hacked thread. I've locked him down, but PLEASE reset your passwords to something strong and consider 2-factor authentication.

I've forced all mods to reset their passwords before being able to login again.

Honcho

 

[Honcho]

Also, as a reminder, do not send a seller any money unless they have a pic listed on the ad with their prime name and current date on a piece of paper next to the item, or they send you one via PM. Prime members are getting scammed this way.

 

[drew]

Any pattern on IP locations?

 

[Honcho]

Any pattern on IP locations?

No, but it looks like Russia. They are compromising old inactive accounts. There was a massive data breach at VBB a few years ago and many forum account logins were exposed. They're using that old login data to get into the forum. I'm looking into doing a mass reset passwords for all members before being let back into the forums.

 

[Honcho]

While a password change likely will solve it, I strongly recommend members change to 2-factor authentication to protect their accounts from being compromised. To enable this feature, click on "Password and security" in your account window:



Next, enable 2-factor authentication. You will need an authenticator app on your phone. I use Google Authenticator. It provides a rolling code to enter when you log into the website. It will also create a list of one-time use backup codes in case you don't have your phone with you. Write these down or save them somewhere secure.

 

[e-rod]

Reminding everyone to invest in a good password manager and change all your passwords to something randomized. They often have generators built in so you can easily create strong passwords. Download the browser extension and mobile app so you can have access to your passwords everywhere.

I recommend getting one that allows 2FA codes to be added so you don't have to finagle two things (I don't trust Google, I avoid Chrome/Authenticator).

There are password dumps sites and even worse on the dark web, people buy these for dirt cheap and brute force through them all to basically find something of value to scam with. Similar with credit cards and stuff.

So if your email (which is used for tons of things) is part of a breach with a password you use in multiple places, you'll get busted unless 2FA/MFA is enabled for that site.

 

[Honcho]

We just had another incident where a scammer compromised a user and attempted to sell an exhaust. Luckily, we caught him before any money was exchanged. This time, the scammer photoshopped a "note" into the picture of the item to try and get around our new rule.

As we have always said here on Prime, the main rule remains Caveat Emptor. Please take extra care before sending someone money. To that end, here are some things you can do when considering a marketplace purchase that should help:

• Look at the price. Is is about what you would expect or does it look low? Scammers have been setting prices low, but not too low, in order to make the item appear like a really good deal. This is a small community and most of us know about how much things cost for the NSX. For example, if you see a brand new exhaust system (normally $1,500-$4,000) being listed for $900, your alert should go off.
• If the seller is a long-time member, check their profile to see when they last posted. If it's from 2009, for example, your alert should go off. The hacks are happening because Vbulletin was hacked many years ago and login info for many different forums, including this one, was compromised. The scammers are accessing old profiles that are inactive and posing as these members in the marketplace, using pictures from other for sale posts.
• Consider using standard Paypal, not friends and family. This way, you have a chance at getting your money back. If the seller insists on F&F, then you should walk away or insist on further verification. Face time with the seller standing next to the item, for example.
• Ask for additional pictures. The scammers are limited to only the pictures posted by the original member, since they don't have access to the actual item.
• Search for the item in the marketplace forum. If the same item with identical pictures appears in a sale ad from years ago, your alert should go off.
• If you know the actual member whose profile is selling, ask them questions only they would know. If they can't answer, walk away and report them.
• If you do catch a scammer, please report them immediately and forum staff will take the ad down and lock the member account. This last exhaust scam was saved because @JohnWayne spotted it and texted me directly. The more we stop these scumbags and make it hard for them to steal from us, the faster they will move on to another forum.