[Ansteorra] URGENT WARNING - Possible hacking or abuse of acceps contact emails

[Haraldr Bassi]

It is indeed possible that the address was harvested outside of the acceps system, but the only 
place that address, which has acceps as part of the email address, was ever used was in acceps 
and it would only have been emailed inside of a spreadsheet to event stewards or exchequers. Not 
as likely to have been harvested from a spreadsheet as from a Database compromise or some other 
place. Don't know that I've ever emailed anyone from that address, but it is possible that it 
ended up in someone's email address book to be harvested.

Haraldr

On 8/2/11 4:55 PM, Kerry Pratt wrote:
> If Acceps had been hacked I doubt that person gaining your information would have any need to get you to a phishing
> site.  More likely, the address that you used, even though you used it exclusively on Acceps, was probably data mined
> from somewhere.  I will still have our server admin look into the possibility that the database has been compromised but
> I am fairly confident that it is just a phishing expedition, as you indicate in your letter.
>
> Everyone, please realize that, to the best of my knowledge, Acceps will NEVER send you an unsolicited email.  If you
> ever receive something, either from Acceps OR anyone else that says they represent this Kingdom, that you find to be
> questionable, please, feel free to ask me about it first.  I am more than willing to investigate any problem or email
> that may compromise the security of our system or attack our members.
>
> William Cameron deBlakstan
> Webminister, Ansteorra
>
> -----Original Message-----
> Sent: Tuesday, August 02, 2011 2:56 PM
> Subject: [Ansteorra] URGENT WARNING - Possible hacking or abuse of acceps contact emails
>
> Greetings,
>
> I've just received nine emails directly to a unique email address that I use exclusively for acceps payments. They imply
> a security issue that is being investigated (basic phishing attempt). I wouldn't follow any of the links in their email.
>
>
> _______________________________________________
> Ansteorra mailing list
> Ansteorra at lists.ansteorra.org
> In order to make changes and manage your account please go to:
> http://lists.ansteorra.org/listinfo.cgi/ansteorra-ansteorra.org