Skip to main content

User login

What is OpenID?
  • Log in using OpenID
  • Cancel OpenID login
  • Create new account
  • Request new password
Register
  • Home
  • Browse
    • 2D Art
    • 3D Art
    • Concept Art
    • Textures
    • Music
    • Sound Effects
    • Documents
    • Featured Tutorials
  • Submit Art
  • Collect
    • My Collections
    • Art Collections
  • Forums
  • FAQ
  • Leaderboards
    • All Time
      • Total Points
      • Comments
      • Favorites (All)
      • Favorites (2D)
      • Favorites (3D)
      • Favorites (Concept Art)
      • Favorites (Music)
      • Favorites (Sound)
      • Favorites (Textures)
    • Weekly
      • Total Points
      • Comments
      • Favorites (All)
      • Favorites (2D)
      • Favorites (3D)
      • Favorites (Concept Art)
      • Favorites (Music)
      • Favorites (Sound)
      • Favorites (Textures)
  • ❤ Donate
Feedback

Phishing attack claiming to be Opengameart

adaliabooks
Tuesday, November 17, 2015 - 13:15

Hi,

I've just had an email claiming to be from here about my account being disabled for suspicious activity that seems to be a phishing scam. Just wondering if they've got my email from here or if it's just a lucky guess...

Anyway, thought people should be on the look out.

On the off chance it's geniune... well I suppose I'd like to know what I need to do (though I really doubt it is geniune)

 

Here's the text of the email (minus the dodgy link at the end, just so no one accidentally clicks it)

 

___________________________________

 

Your Acount is disabled for the purposes of security

Dear Customer., While the audit team is reviewing your Acount,

they discovery strange activity or deceptive or fraudulent and based upon,

The team disable access to your Acount until your review for this strange activity and respond to it

What is the problem in detail?

1. You have more than one Peypal with a negative balance; or

2. You provided information that we believe was false, inaccurate, or misleading; or

3. You sent or received money that was potentially related to fraudulent activity; or

4. You are in violation of the User Agreement, the Commercial Entity

Agreement, the Acceptable Use Policy, or another agreement you have with us.

What is the solution?

To resolve this issue, you must log on to the site of the page devoted to verify

which is attached at the bottom of linked

 

and write your lnformation in a full

Thank you for give us your time

Apologize for any annoying

Kind regards

   

17/11/2015 03:40:06

  • Log in or register to post comments
Nimbal
joined 10 years 3 months ago
Tuesday, November 17, 2015 - 13:34

I got this as well, to an email address that was unique to my account here on opengameart.com. In other words, someone got into opengameart's server and extracted at least a bunch of email addresses.

  • Log in or register to post comments
andyman404
joined 12 years 5 months ago
Tuesday, November 17, 2015 - 13:43

I got it too. Everyone change your passwords! The server has definitely been hacked, and this does not appear to be the first time...

I did a search on the server's ip address and found that it was hacked most recently in June 2015 or earlier. That hack is still there! Open link at your own risk: http://dnd.opengameart.org/memberal.php

 

  • Log in or register to post comments
Bunzaga
joined 11 years 9 months ago
Tuesday, November 17, 2015 - 13:49

I also got this.  It was sent about 1 hour ago.

  • Log in or register to post comments
altodizi
joined 9 years 7 months ago
Tuesday, November 17, 2015 - 13:51

Yes, I got one too. This is the only account I have attached to this email (I lost access to my usual game related account) and the first time I've used it.

  • Log in or register to post comments
bart
joined 13 years 11 months ago
Tuesday, November 17, 2015 - 15:25
bart's picture

@andmyman404:  Where are you searching for this stuff?  That sounds useful.

  • Log in or register to post comments
andyman404
joined 12 years 5 months ago
Tuesday, November 17, 2015 - 15:44

I searched Duck Duck Go for the server's IP address. The first real hit was this: http://www.leetsmirror.com/ip_199.180.155.30.html

It says that hacker Memberal_Force hit the server back in June. I don't know if it is the same thing that caused today's email spam though.

Now that opengameart.org is back online, it looks like that Memberal_Force thing been cleaned up at least.

  • Log in or register to post comments
DezrasDragons
joined 10 years 5 months ago
Tuesday, November 17, 2015 - 15:56
DezrasDragons's picture

Very helpful information. I was unable to access the site this afternoon around 4:30pm EST, but I did not receive any emails. Will be updating passwords nonetheless.

  • Log in or register to post comments
Redshrike
joined 15 years 10 months ago
Tuesday, November 17, 2015 - 17:57
Redshrike's picture

My friend has informed me that the email he used exclusively to submit to the LPC has also received spam, so clearly they did get access to some restricted info (if that wasn't already obvious).

  • Log in or register to post comments
azarus
joined 10 years 9 months ago
Wednesday, November 18, 2015 - 03:54

I got this email too.. Sooo shall i just ignore this?

  • Log in or register to post comments