Page 1 of 1

Wonga phishing emails

Posted: Wed Jan 23, 2013 1:13 pm
by olliebean
I have recently been receiving phishing emails trying to get me to login to a fake Wonga website, which have been sent to the email address I used to sign up to this forum. I have never used this email address elsewhere. I don't know what the implications of this are on the security of your website, but I think it is something that warrants being brought to your attention.

Re: Wonga phishing emails

Posted: Wed Jan 23, 2013 5:25 pm
by Andrew Lee
Anyone else encountered this? Personally, I haven't received such an email of late.

Re: Wonga phishing emails

Posted: Wed Jan 23, 2013 10:54 pm
by tproli
None yet

Re: Wonga phishing emails

Posted: Wed Jan 23, 2013 11:01 pm
by joby_toss
I did receive spam mails from wonga, but I use this mail account on many forums...

Image

Image

Re: Wonga phishing emails

Posted: Wed Jan 23, 2013 11:06 pm
by SYSTEM
I have received a lot of these Wonga emails. :( My email address is publicly visible on the Internet, though...

Re: Wonga phishing emails

Posted: Thu Jan 24, 2013 12:56 am
by I am Baas

Re: Wonga phishing emails

Posted: Thu Jan 24, 2013 3:27 am
by olliebean
Yes, it's just a standard sort of phishing email, what caught my attention was that it was sent to my Portable Freeware email address. Usually these sorts of thing come to addresses I've used publicly, or just random addresses at my domain. I use unique addresses at websites I have accounts with, precisely so that if any of them "leak" my email address I can tell where the leak came from.

I've got "Users can contact me by email" selected on my profile - not sure if that makes my email address accessible to people scraping the site, without actually breaching security?

Re: Wonga phishing emails

Posted: Thu Jan 24, 2013 3:45 am
by Midas
None here. :mrgreen:

Re: Wonga phishing emails

Posted: Thu Jan 24, 2013 8:35 am
by JohnTHaller
The Portable Freeware Collection database was hacked on July 5, 2012 and July 13, 2012. Usernames, emails and password hashes stolen during the hack were posted publicly online on August 23, 2012. As you were a member during that timeframe, your information was made public as well.

More details are included in this topic: http://www.portablefreeware.com/forums/ ... 98&start=0

Re: Wonga phishing emails

Posted: Thu Jan 24, 2013 11:46 am
by olliebean
Thanks, that explains it then.