Spurious password change request emails

[Wilf55]

Yup, same thing here

[Pizzicato]

Looks like there's almost as many password request emails as there are brand new threads about the exact same thing... ;)

[coilwinder]

Same here, got 4 in a row an hour ago.

[Amuro]

I received two e-mails as well, which I've deleted.

[Hammer]

Why am I getting password change request over 80 times?

 

My email is becoming flooded with requests I did not make to ED. Is anyone having this happen to them or know why it's happening to me? 9 to 12 requests with in a minute than it starts over again the next. it's up to 32 total now.

 

Thanks in advance.

Edited October 31, 2014 by Hammer

[cichlidfan]

http://forums.eagle.ru/showthread.php?t=133015

[outlawal2]

So 6 pages of folks with this issue (I have 4 of them myself..)

How about something from ED on this issue? Is this a server issue or what?

[Buzpilot]

Maybe a good idea if ED looks at the last visitors on our 'UserCP' page, to see if one name have been looking for email, on all who is listed here.

[Hammer]

Cheers

[Hammer]

I have about 30 requests I did not make sent to me within the two or so hours.

[Pizzicato]

So 6 pages of folks with this issue (I have 4 of them myself..)

How about something from ED on this issue? Is this a server issue or what?

 

You do realize that it's only just 7am in Moscow and that this issue has been going on while they're all asleep, right? :sleep:

[funkyb]

No need to change the password, it is a "Password Sniffer" like back in the old AOL times.

 

Requesting a change hoping U use their web page or email to do so. If u do not it gets nothing from U. Hence no need to change due to a "Sniffer".

 

Don't think so. The e-mail originates from eagle.ru and the link directs to the proper dcs reset page. Unless they have compromised the ed host, your personal email account, or god forbid root dns al-la some kaminsky style exploit, then clicking that link and resetting your password probably doesn't pose any risk.

Edited October 31, 2014 by funkyb

[VincentLaw]

I also received this, and I came here to make a topic about it. Looks like someone is trying to steal accounts. My password was not changed though. I will delete the emails I received.

[S3PukkU]

I got also got a couple of requests to change password.

Looks like someone got a list of usernames and is hitting the password reset, possibly looking for compromised email accounts.

[Mr_Blastman]

Same here! What is going on?!

[RagnarDa]

Received two emails at 3 am in the night here.

[VTJS17_Fire]

Same here. Until now just one mail arrived.

[Phantom453]

Two here, six minutes apart. Identical.

 

Link takes me to what appears to be legit ED password change page (without requiring my password!).

 

Obviously I haven't entered anything.

 

Some advice from ED staff would be greatly appreciated right now about what is going on and what action, if any, is required.

[Pepec9124]

I got 2 requests when I was asleep. I 'll change my password just in case.

[statrekmike]

I went ahead and changed my password for both this site and my email just in case, I don't really trust those emails.

[Rangi]

I have had about 5 so far...

[gonk]

Just receive 2, I guess someone wants to play DCS.... ? I manually visited the DCS store and changed my password at the ED Store and the ED Forums (they are always different), just in case. Curious if they are getting the list of users from the forum ? I usually play at AEF/104/and 159. Maybe one of these is where they are gathering login names

Edited October 31, 2014 by gonk

[streakeagle]

I am guessing they failed and moved on after 4 tries, as I am still logging in with my original somewhat complex password that would be very hard to guess or even hit with random sequences.

[Noumcea]

I received 2 as well and deleted them. Come on DCS, what is going on ?

[const]

We had password change request attack. You don't need to change your password. Attacker was blocked. User accounts were not affected.