Be cautious of Aututto messages

[Aututto]

Hello all,

It appears my account was hacked sometime around the beginning of September and has been used in a few instances that I know of to complete a scam. Most recent was a hacked account on timezone (jhmessing) which stated me as a reference, the the hacker used my account here to send messages to a user reaching out stating that the account on timezone was valid. Pretty elaborate! I have been told the scammer tries to deal through email and not pm or phone.

I have notified TRF admins, but in the meantime be cautious of strange messages demanding email communication from my account. Hopefully this is fixed soon.

I also have promptly changed my password.

[Welshwatchman]

Originally Posted by Aututto

Hello all,

It appears my account was hacked sometime around the beginning of September and has been used in a few instances that I know of to complete a scam. Most recent was a hacked account on timezone (jhmessing) which stated me as a reference, the the hacker used my account here to send messages to a user reaching out stating that the account on timezone was valid. Pretty elaborate! I have been told the scammer tries to deal through email and not pm or phone.

I have notified TRF admins, but in the meantime be cautious of strange messages demanding email communication from my account. Hopefully this is fixed soon.

I also have promptly changed my password.

Fixed how?

Also, it is likely that you clicked a phishing link and gave up your password.

Please don't list anything for sale for at least 3 months else a mod may ban the account pending proof of identity. All we have is your word that you reset your password.

[Aututto]

Originally Posted by Welshwatchman

Fixed how?



Also, it is likely that you clicked a phishing link and gave up your password.



Please don't list anything for sale for at least 3 months else a mod may ban the account pending proof of identity. All we have is your word that you reset your password.

I’m not sure how that’s why I reached out to the admins about this.

I never clicked a link giving up my password ever which is what baffles me. I’m a systems engineer so I’m well aware of internet safety and potential scams to steal a password.

Luckily I have nothing I plan to sell at all so you should not see any FS listings from me. My recent sale and feedback from ZoJaJ regarding the 114270 is the only legit sale completed here.


Sent from my iPhone using Tapatalk

[77T]

What other online passwords were lifted? If the TRF uid was compromised, many others would likely have gone out the door too.


Sent from my iPhone using Tapatalk Pro

[GLADIATOR]

Originally Posted by Aututto

Hello all,

It appears my account was hacked sometime around the beginning of September and has been used in a few instances that I know of to complete a scam. Most recent was a hacked account on timezone (jhmessing) which stated me as a reference, the the hacker used my account here to send messages to a user reaching out stating that the account on timezone was valid. Pretty elaborate! I have been told the scammer tries to deal through email and not pm or phone.

I have notified TRF admins, but in the meantime be cautious of strange messages demanding email communication from my account. Hopefully this is fixed soon.

I also have promptly changed my password.

"promptly"
Seems about 1 month??

[GLADIATOR]

Originally Posted by 77T

What other online passwords were lifted? If the TRF uid was compromised, many others would likely have gone out the door too.


Sent from my iPhone using Tapatalk Pro

Maybe all sellers passwords must be changed quarterly and all members yearly??

[77T]

Originally Posted by GLADIATOR

Maybe all sellers passwords must be changed quarterly and all members yearly??

I wouldn’t suggest that. It would punish the 99.9% of users for the 0.1%...

Plus, the increased “help me” admin requests could overwhelm the Mods.


Sent from my iPhone using Tapatalk Pro

[Aututto]

Originally Posted by GLADIATOR

"promptly"

Seems about 1 month??

Ha ha yes I realize how that sounds now. I was a bit flustered earlier when I found out about all this. I actually got a PM from a user today who was verifying the time zone account. That’s when I found out about my account being used. I then went to my profile and saw some visitor messages on my page from the beginning of september that were deleted. That’s when I realized about how far back it went.


Sent from my iPhone using Tapatalk

[Aututto]

Originally Posted by 77T

I wouldn’t suggest that. It would punish the 99.9% of users for the 0.1%...

Plus, the increased “help me” admin requests could overwhelm the Mods.


Sent from my iPhone using Tapatalk Pro

I agree. I think this is a pretty rare case. And from what I’m seeing pretty elaborate compared to the typical TZ scams I’ve seen with stolen images and slightly changed email names. I think this is the first I’ve heard of someone fronting a TRF account.

Weirdly they didn’t use my account as a seller at all. But told people I was a reference on their fake listings at TZ.


Sent from my iPhone using Tapatalk

[Tony8959]

I’ve ran into something odd like this last winter after I first joined. Not with my profile but some others. I posted on the WTB that I was looking for a watch to buy (not knowing better). Received a message from a “seller” with details and some pics of the watch he had. He didn’t have many posts, maybe around 50 or so, but gave me some references on here. I reached out to them and all verified their transactions with him. We then went back and forth a bit by email, we exchanged info, but something about the way he was writing and somewhat pushy didn’t seem right. So I followed up once again with one of his references to make sure the info he gave me checked out.

This time the reference messaged me back not knowing what I was talking about. He said that wasn’t him that was communicating with me and had no prior dealings with this seller. We were both very surprised as to what had happened. I immediately told this person I was no longer transacting and notified the mods on TRF of what happened. They banned his profile.

[je302]

I just received a message from a member called fconnection saying he is interested in a watch I am selling. Tells me to email him @ [email protected] , ya right. Member for one day and 5 generic posts. Not sure if he is behind your hack but using your email. Is there a way to have this member banned?

[MLW2865]

Yep, just had the exact same thing on a FS thread I have. Need to ban for sure.

Sent from my SM-G975U using Tapatalk

[cap82]

Yeah I just got the same message. Included some link - I assume it’s some phishing scam.

[threefirstnames]

Received email from [email protected] as well regarding a FS thread I have - Email included broken link that wouldn’t resolve to a actual page (via mobile), however no PM from a user.

Beware.

[crashpad]

Received same scam email today as well.


Sent from my iPhone using Tapatalk

[Noonan]

Originally Posted by steeze

Received email from [email protected] as well regarding a FS thread I have - Email included broken link that wouldn’t resolve to a actual page (via mobile), however no PM from a user.

Beware.

Uh, if you clicked on the "broken" link, you may already be compromised.

[jerry017uk]

I just got same message from (Aututto <[email protected]>) asking to make purchase for my Rolex Daytona Steel Black Dial SG listed For Sale.
Sent this link as well.

[jharris888]

Same thing happened to me... someone was posing as me and giving fake reference checks to people. I never clicked any phishing links so unsure how my login was compromised. Hopefully this isn’t a bigger issue as it seems to have happened to quite a few the past month.

[Stevoflurane]

same thing just happened to me, directed me to a phishing site that looked exactly like the forum. I unfortunately entered my password but realized what happened and changed my password within 2-3 min so hopefully no damage. It was at least a random password that I don't use for any real accounts of importance. BEWARE of emails from [email protected]

[tesmith2112]

Me too, got an email regarding sales thread.

[Gprotein]

I warned the mod about this user account around 2 weeks ago, but only got banned days later. God knows many hacked messages went out to scam someone...

[Ttnpt00]

I went back and forth with the scammer for several messages when looking for an explorer II in September. He was very vague but responded from the forum direct messages as well as an outside email. Fortunately prices was way too good to be true and he was odd so I didn’t fall for it.