Blackmail phishing email - PH password

[keith2.2]

Hi All,

I received a blackmail scam email this evening that contained a password.

Obviously a mail bot based on a list of emails and passwords but my concern is that the password is one I only use on PH and 2 other motoring forums.

Has there been a data breach? Anyone else had the same?

Edited by keith2.2 on Tuesday 9th July 15:20

[Ransoman]

Have you used this password for other sites in the past? Even if you have since changed it?

[keith2.2]

Possibly. I'm not especially concerned as there are no payment details on the sites and the other statements in the email 'I've got videos of you PLEASURING YOURSELF' - no you haven't

Made me double take though and the list must have come from somewhere.

[Zetec-S]

If you've not done it already then put your email address in this site and see if you've had any potential data breaches:

https://haveibeenpwned.com/

[Ransoman]

keith2.2 said:

Possibly. I'm not especially concerned as there are no payment details on the sites and the other statements in the email 'I've got videos of you PLEASURING YOURSELF' - no you haven't

Made me double take though and the list must have come from somewhere.

It's a very common type of phishing scam. It relies on the fact that many people use the same password accros multiple sites and never change it. The password could have come from anywhere, Even a single make enthusiasts/owners forum you registered to 15 years ago.

Just make sure to write off that password, change it anywhere that uses it (especially work accounts) and ignore it.

[Jack Mansfield]

^ What he said! There is no data breach on our end fortunately.

[RSTurboPaul]

Zetec-S said:

If you've not done it already then put your email address in this site and see if you've had any potential data breaches:

https://haveibeenpwned.com/

Is that a genuine site?

I never trust anything on the internet nowadays, lol, so expect things to be harvesting my details!!

[Zetec-S]

RSTurboPaul said:

Is that a genuine site?

I never trust anything on the internet nowadays, lol, so expect things to be harvesting my details!!

Been recommended by a few PHers, and also my IT department at work...

(whether that should fill you with confidence or not I don't know )

[Ransoman]

Zetec-S said:

RSTurboPaul said:

Is that a genuine site?

I never trust anything on the internet nowadays, lol, so expect things to be harvesting my details!!

Been recommended by a few PHers, and also my IT department at work...

(whether that should fill you with confidence or not I don't know )

Yep, its a good site, I use it all the time (I am head of Cyber Security at the company I work for).

[keith2.2]

Thanks for the feedback. First thing I did was change said password.

I also went back through my junkmail for a week and it looks like I've had four of the same one.

Glad it's not from PH!

I checked the pwn3d website - 12 times! Incluiding linkedin, dropbox and myfitness pal.

Edited by keith2.2 on Thursday 11th July 10:03