Reasons for being targeted via attempted password resets.
Reasons for being targeted via attempted password resets.
Author
Discussion

LuS1fer

Original Poster:

43,556 posts

276 months

Tuesday 17th September 2019
quotequote all
I know very little about technical things regarding computers but, in the past, let's say 3 months, I have had multiple e-mails saying I had requested a new password from mainly from ebay and Facebook but possibly also Amazon and certainly gmail.
The sheer persistence has been remarkable and has resulted in my changing passwords (directly, not via any email) on most accounts to unfeasibly long and complicated ones.

Having never been targeted before, I am something of a loss to understand why.
It sort of culminated when I checked my email account and it had been suspended, due to "suspicious activity" although what this was was never disclosed and I had to get an administrator to reopen and reset it.
I assume this is possibly an attempt to access the confirmation codes you have to enter when you request a password reset (though because I use an email forwarding programme, these emails are not in the account - that email programme is one I have been using for nearly 10 years without issue).

The only two things I have done recently was selling a Windows Phone with a factory reset but that was at least 6 months ago and this is all recent and I have cloned my HDD onto a SSD (using my computer, no outside source).

I can't think of any obvious reason why I have been targeted so hard . I have Avast as my anti-virus.

Should I be doing anything else?
The password resets have slowed down but I had yet another Facebook one this morning.
As far as I know, I have no malicious acquaintances who would do this just to p*ss me off.

Scabutz

8,892 posts

111 months

Tuesday 17th September 2019
quotequote all
Check the haveibeenpwned website. Its possible your email address has been part of a data breach and now a bot is trying to access accounts.

I would say it's highly unlikely its specifically targeting you personally, it's just your email address

The_Jackal

4,854 posts

228 months

Tuesday 17th September 2019
quotequote all
Those will be phishing emails, trying to get you to click the link to input your details.
Your address is clearly on a list doing the rounds.
And factory reset doesnt necessarily securely wipe your data. The best you can do is have your phone encrypted while you are using it.
People who scan old phones and devices for ID theft, access 100s of phones, they only need one or two that arent encrypted. Lowest hanging fruit technique. Used to be PCs but nowadays everyone has their life on their phone, and even kids have phones with credit card details on.

LuS1fer

Original Poster:

43,556 posts

276 months

Tuesday 17th September 2019
quotequote all
Indeed it has been breached on above website so having changed all my passwords to unfeasibly complicated ones not even I can remember will be the remedy.

Thanks for the info.

jesusbuiltmycar

5,137 posts

285 months

Wednesday 18th September 2019
quotequote all
Are you using a password manager? If not it is well worth it as it can take the pain out of trying to manage having a different password for every sit you use. I use Lastpass but there are plenty of others (see www.lastpass.com).

See also: https://www.pistonheads.com/gassing/topic.asp?t=17...