Discussion Forum: Problem(Post New Message)
Redisplay Messages: Compact | Brief | All | Full      Show Messages: All | Without Replies

 Author: chetzler View Messages Posted By chetzler
 Posted: Mar 21, 2024 19:34
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 68 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, waltzking writes:
  As someone not in any LEGO groups (or at least not using my BL email address),
and am still getting the scam emails, I am certain it related to either the hack
or fake contact/orders on BL that can harvest seller emails. Had a lot of these
orders, immediate cancel request, and no contact there after a few months back.
I know it was to phish my seller info as often as the pattern was repeated exactly.
But even messages we reply to can do this as the system still lonks our email
to those. It really should not do this unless an order is placed, or even confirmed
as paid by the system (instant or seller marked). Simply put, contact info should
remain better protected until a transaction is deemed legit. BL is largely an
open book for all seller info if the party wanting to phish it knows how the
site works.

Waltzking

Is there any need at all for buyers/sellers to see each other's email contact
info even on legitimate orders? Maybe I've been using instant checkout and
the pay now button for so long I have forgotton, but it has been a while since
a buyer has made a payment directly to my email address. Since BrickLink implemented
sales tax collection, all (at least all of my) payments are negotiated through
PayPal Marketplace.

Maybe other payment methods require an email address.

I know some people send photos via email (if only we could attach photos to a
BL message!).

I'd be perfectly happy to have "public-facing email address" be an
option that I can enable/disable at will.
 Author: waltzking View Messages Posted By waltzking
 Posted: Mar 21, 2024 19:16
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 64 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
As someone not in any LEGO groups (or at least not using my BL email address),
and am still getting the scam emails, I am certain it related to either the hack
or fake contact/orders on BL that can harvest seller emails. Had a lot of these
orders, immediate cancel request, and no contact there after a few months back.
I know it was to phish my seller info as often as the pattern was repeated exactly.
But even messages we reply to can do this as the system still lonks our email
to those. It really should not do this unless an order is placed, or even confirmed
as paid by the system (instant or seller marked). Simply put, contact info should
remain better protected until a transaction is deemed legit. BL is largely an
open book for all seller info if the party wanting to phish it knows how the
site works.

Waltzking
 Author: popsicle View Messages Posted By popsicle
 Posted: Mar 21, 2024 19:13
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 61 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, Admin_Russell writes:
  In Problem, Saitobricks.ca writes:
  In Problem, Admin_Russell writes:
  In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.

All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.

As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.

Does there happen to be a plan in the works to stop this activity?

Yes. In fact, most of what is being done to prevent this type of fraud is being
done behind the scenes, and BrickLink members are not aware that it is happening.

Makes sense. That being the case however, would not this suggestion slide perfectly
into the space between understandings: https://www.bricklink.com/message.asp?ID=1460563
 Author: cosmicray View Messages Posted By cosmicray
 Posted: Mar 21, 2024 16:55
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 79 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, chetzler writes:
  BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.

There are a couple of takeaways from that ... first, steer away from the need
to reply IMMEDIATELY to anything you see prior to your first cup of java, tea,
or whatever. Second, do not trust any link that comes in an email, unless a site
is sending you a validation link, has told you it was just sent, and you just
received it. Everything else, including smishing attempts within SMS texts should
be considered suspect dangerous, and unreliable.

The whole paradigm of social engineering attacks is to make you react without
thinking it all the way thru. Take the slow paranoid path, log into the site
using a known good bookmark, and ignore any links that come via dangerous paths
(no matter how real they appear).

Nita Rae
 Author: cosmicray View Messages Posted By cosmicray
 Posted: Mar 21, 2024 16:45
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 59 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, randyf writes:
  And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.

I have not received these phishing emails. That said, I am not a member of any
online BL groups, other than reddit, where I visit infrequently. So there may
be something to this theory.

Nita Rae
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Mar 21, 2024 16:41
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 41 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, Saitobricks.ca writes:
  […]
he lives in Ukraine

We don’t know that.  The most we know and can say is the person who registered
chose Ukraine for the country field.
 Author: Saitobricks.ca View Messages Posted By Saitobricks.ca
 Posted: Mar 21, 2024 16:19
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 37 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, 1001bricks writes:
  In Problem, UTLF writes:
  
  I don't think it's appropriate to mention an invaded Country, right now in war, and BrickLink decision to merge a few parts in their Catalog.

That's not even close to what I was referring to: https://www.bricklink.com/message.asp?ID=1423027

Sorry, but then it's very certainly not a person from Ukraine, who
as a majority have very probably something better and more urgent to do than
attempt to hack a LEGO items site

You never know, just because he lives in Ukraine dosen't mean he is not bad.
Bad people are everywhere!
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Mar 21, 2024 16:13
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 41 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, UTLF writes:
  
  I don't think it's appropriate to mention an invaded Country, right now in war, and BrickLink decision to merge a few parts in their Catalog.

That's not even close to what I was referring to: https://www.bricklink.com/message.asp?ID=1423027

Sorry, but then it's very certainly not a person from Ukraine, who
as a majority have very probably something better and more urgent to do than
attempt to hack a LEGO items site
 Author: Saitobricks.ca View Messages Posted By Saitobricks.ca
 Posted: Mar 21, 2024 16:03
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 48 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, Admin_Russell writes:
  In Problem, Saitobricks.ca writes:
  In Problem, Admin_Russell writes:
  In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.

All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.

As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.

Does there happen to be a plan in the works to stop this activity?

Yes. In fact, most of what is being done to prevent this type of fraud is being
done behind the scenes, and BrickLink members are not aware that it is happening.

What percentage of spam would you say has been stopped behind the scenes?
 Author: randyf View Messages Posted By randyf
 Posted: Mar 21, 2024 16:02
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 54 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, Admin_Russell writes:
  In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.

All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.

As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.


Good to know. Let's just hope that our beloved BrickLink can make it through
largely unscathed. I am sure I am not the only one that doesn't want a repeat
of November 2023 to happen, but everytime someone falls for one of these things,
we get closer to that happening again. I do feel bad for those getting targeted,
but people need to be cautious.
 Author: Admin_Russell View Messages Posted By Admin_Russell
 Posted: Mar 21, 2024 15:58
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 97 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, Saitobricks.ca writes:
  In Problem, Admin_Russell writes:
  In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.

All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.

As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.

Does there happen to be a plan in the works to stop this activity?

Yes. In fact, most of what is being done to prevent this type of fraud is being
done behind the scenes, and BrickLink members are not aware that it is happening.
 Author: Saitobricks.ca View Messages Posted By Saitobricks.ca
 Posted: Mar 21, 2024 15:48
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 43 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, Admin_Russell writes:
  In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.

All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.

As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.

Does there happen to be a plan in the works to stop this activity?
 Author: Admin_Russell View Messages Posted By Admin_Russell
 Posted: Mar 21, 2024 15:44
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 96 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.

All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

Interesting theory. But the scammers that caused the November 3 incident are
the same ones that caused the problems last night, and the variant merge project
was not exposed to the public before January 2024.

As much as companies tend not to boast about the number of online attacks they
receive, we do see a remarkable increase in scammer activity across the board
- throughout many companies and across different industries. To us, it does not
feel like BrickLink is being singled out.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Mar 21, 2024 15:34
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 44 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, UTLF writes:
  
  A bad buyer who has been collecting data on sellers, when they make orders.

Let me guess, Mr. Evil from Ukraine that was banned back in August?

I don't think it's appropriate to mention an invaded Country, right now
in war, and BrickLink decision to merge a few parts in their Catalog.
 Author: Saitobricks.ca View Messages Posted By Saitobricks.ca
 Posted: Mar 21, 2024 15:33
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 36 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, UTLF writes:
  
  A bad buyer who has been collecting data on sellers, when they make orders.

Let me guess, Mr. Evil from Ukraine that was banned back in August?

How can they know for sure that he is gone and that he was the source of ALL
the problems?

He could just put down a fake address, make a new E-mail and go by a different
user name. Not that hard to return for more trouble.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Mar 21, 2024 14:22
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 56 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.


All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur.

Coincidence != causality.

There has been attempts before this, and probably hundreds we don't know
about, or thousands during those 24 yrs of BrickLink.

Apart this, hackers seem to be high on steroids; many many places including our
French Administration couple weeks ago, PayPal is asking me VERY often to 2FA
(while normally it's once per year maybe), etc.
 Author: pashah View Messages Posted By pashah
 Posted: Mar 21, 2024 14:20
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 66 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, chetzler writes:
  I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.

Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory

BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.

I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.

I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.

It would be great if BrickLink allowed sellers to have multiple emails on file:

- a public-facing email with which to contact customers (when sending/receiving
pictures, etc.)
- a non-public-facing email used for two-factor authentication and for seller
account admin purposes (including log in notifications). it makes no sense to
have two-factor authentification if the public-facing email is exposed in a phishing
attack
 Author: chetzler View Messages Posted By chetzler
 Posted: Mar 21, 2024 14:15
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 56 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.


All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.


That feels like a stretch. The people that tend to get upset about some of BL’s
unpopular decisions (myself included) get upset because they love BrickLink.
I’d have trouble believing that one of those people would put in the time and
effort required to launch a phishing scheme that damages the thing they love
and at the same time subjects their fellow members to the collateral damage.

  
And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.

I’m not active in any online groups.
 Author: yorbrick View Messages Posted By yorbrick
 Posted: Mar 21, 2024 14:10
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 62 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, randyf writes:
  In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.


All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.

I checked earlier, the .net site is about two months old and the bricklink-com.co
just two weeks. Whether it is linked to merges, I don't know. Haven't
some people mentioned high value sets being added? That suggests financial fraud
rather than just messing about.
 Author: randyf View Messages Posted By randyf
 Posted: Mar 21, 2024 13:46
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 85 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, chetzler writes:

  I don’t know why BrickLink has suddenly become such a juicy target.


All of it started fairly shortly after all of the extremely unpopular part merges
started to actually occur. I have a strong feeling that a user here that was
very upset about the decisions made is having some "fun" at BrickLink's
expense.

And judging from the people who are receiving phishing emails (e.g I'm not),
the phisher is probably part of an online BrickLink group somewhere else (Facebook?
Discord?) that all of you are also part of or maybe they ordered from all of
the phishees in the past and already have all of your contact information to
use.
 Author: macebobo View Messages Posted By macebobo
 Posted: Mar 21, 2024 12:37
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 61 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, SylvainLS writes:

  Besides, BrickLink is being helped by LEGO’s security team.

Let us hope this goes better than what "Award winning Lego support" team
is doing to help out the help desk.
 Author: chetzler View Messages Posted By chetzler
 Posted: Mar 21, 2024 12:27
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 57 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, SylvainLS writes:
  In Problem, chetzler writes:
  […]
I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon.

But what kind of “substantive action” can BrickLink take?

I don’t know, that’s above my pay grade. It’s not my job to solve the problems
of a billion dollar multinational company, but I have trouble accepting that
LEGO is powerless to do anything. As others have pointed out, this level of
insecurity in simply not found to this degree in other online arenas: not in
any of my online banking or investment portals, not in any medical billing portals,
not in any government/tax portals, not in other online marketplaces I use, not
even at LEGO.com. BrickLink stands out as a site that is starting to make me
a little nervous.

I understand the gummy spam is probably a low security concern, but it should
represent a HUGE image concern. If our brick-and-mortar business had hawkers
out front all day handing out flyers to our customers, I’d be derelict in my
duties if I wasn’t chasing them off and taking steps to make sure they didn’t
return. If I couldn’t even do that much, how much faith should our customers
have that we would address more serious concerns? It really looks like BL management
simply does not care about a public-facing piece of their website.

  (litany of excuses)

I do know that, at my primary business, if our customers were being inundated
with spam and fishing attempts, we’d have a lot of angry customers and that would
result in a lot of bad word of mouth around the community if we didn’t figure
out a way to rectify the situation quickly. Worse yet, if one of our employee’s
response was a bunch of excuses followed up with, “eh, what do want us to do?
You need to look out for yourself!” that employee would probably be fired and
we’d be in serious danger of going out of business.
 Author: yorbrick View Messages Posted By yorbrick
 Posted: Mar 21, 2024 12:07
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 48 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
  Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory

It must be a different one, as the .net one that goes to bricklink-com.co doesn't
really look anything like the frontpage of BL. No BDP banner, no "Browse"
box. Plus the login box is very different as it is a full page rather than a
pop-up. Also none of the buttons like "remember this login" tickbox work
if you click them.
 Author: yorbrick View Messages Posted By yorbrick
 Posted: Mar 21, 2024 12:06
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 35 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
  MFA?  They did that with OTP.

Mandatory OTP?  They did that last week.  It’s annoying and people are opting
out (like you did at first).

The OTP doesn't work anyway, as the scammers can get the user to send the
OTP code to them.
 Author: Tracyd View Messages Posted By Tracyd
 Posted: Mar 21, 2024 11:42
 Subject: Re: WARNING! Login from new device phishing emai
 Viewed: 53 times
 Topic: Problem
View Message
View
Cancel Message
Cancel
Reply to Message
Reply
In Problem, chetzler writes:
  I had a couple of these this in my inbox this morning. They looked completely
legitimate. I did login in to BL from my work computer yesterday. When I have
logged in from work before, I have never gotten an email like this, but I thought
that maybe it was a new security feature.

Anyway, with a very official looking email in hand, I clicked the suggested logout
from all devices link and had just about entered my credentials in the new window
to log back in when I noticed two minor things that seemed just a bit off. I
won’t mention those things in case the fraudsters are reading. I looked at the
URL and it was very close to BrickLink’s (it was not the .net one that was mentioned
before). Needless to say, I immediately changed my PW and reenabled the one-time
PIN (I had turned it off because I was being repeatedly prompted for a new PIN
over very short time spans even when I hadn’t logged out). I’ll also be downloading
my inventory

BE DILIGENT! I’m a pretty suspicious person when it comes to online activity,
but, in my groggy state when I woke up this morning, I almost fell for a phishing
scheme presented as a very authentic looking email.

I don’t know why BrickLink has suddenly become such a juicy target. These people
have no hope of accessing any of my monetary accounts. I assume the goal is
to gain access to a legitimate shop so they can list high-dollar items to scam
other members.

I don’t envy the task that management has ahead of them, but they need to take
some substantive action soon. This is not a primary income stream for me, so
at some point, when all the gummy spam, phishing attempts, and slow helpdesk
response times become too much, I may simply close my store for a while. I don’t
need the extra headache of worrying about online security for a part-time job.
Had I fallen victim to this phishing attempt, I’m really not sure how much effort
I would have put into trying to recover my account. BrickLink just feels like
a dicier selling proposition lately.


I feel slighted I have none.
From a cybersecurity standpoint you never click a link in a text or an email
about suspicious activity. You go straight to how you normally access the site
and see if there is a message there, if it is legitimate, you can then do what
is needed. Even if there isn't you might consider change your password. I
keep getting texts that my bank account is in jeopardy from a bank that I haven't
had an account with for 15 years, needless to say I don't click that link.
I have even gotten texts from PayPal about a dire issue, but when I access PayPal
normally there is nothing there. Thinking before you click is always your first
action. My job sends out test phishing emails. While some look official they
are never using a correct email address and are for things that I expect to be
notified of before an email requiring action.

Next Page: 5 More | 10 More | 25 More | 50 More | 100 More