has eqtraders been hacked (email attached)

[Aelf]

I just received the following email (edited to PG). I haven't played EQ in a while and suspect that someone has accessed the account list of eqtraders.com

Regards,
Aelf

Note: I suspect the web address is a honeypot page and advise anyone against accessing that site. I have added spaces to it to stop inadvertent access.

Subject: TRADESKILLS ARE BEING DISCONTINUED.

TRADESKILLS ARE BEING DISCONTINUED.

IN EXCHANGE FOR YOUR HARD WORK GETTING YOUR TRADESKILLS TO 300, YOU SHALL RECEIVE 10 AAS PER GM SKILL AND A VERY CHEAP FRUIT BASKET AT CHRISTMAS.

[vestagirl]

Hacked Email Message

I just got this as well, I also have not played EQ for a long time, It is a "Rick Roll" url.

[Bryan Williams]

Same here. As vestagirl said, the link is just a YouTube Rick Roll.

I just noticed, all three of our Join Dates are Jan 2003.

[artbrann]

got it too, and I hadn't played EQ in years

switched to EVE when the guild ran off to WOW

[Morgrist]

Ditto. Just found that in my inbox. Someone's been in the Denmother's stuff...

Which was quite the surprise, as my game nowadays is FFXI, I'm about as small as Denmother is nowadays (Tarutaru!) and the main craft is 90 Clothcraft, not Smithing 200ish from when I last played EQ1. :P

[Lanadena]

Me too! Someone must want to bring all the old EQers together.

[Ngreth Thergn]

Well it was not us, and I do not know how it was achieved.

At least the link is harmless.

[Furiel]

Bring all the old EQers back together indeed.

How bizarre.

[Kronepsis]

I'm kind of wondering if someone simply knows some obscure trick to cause the admin to send a mass email. No actual database hacking involved in that case.

[Beriberi]

Yeah I got it too. No idea what Frodlin did to inspire such wrath...

B

[gummo]

I had forgoten that I ever even registered on these "new" boards until the email reminded me.

[Naeen]

got the email as well. haven't posted on this site or played eq in probably 5 years.

[Samanna]

The samanna.net forums have been hacked, too. I have them down while a course of action is decided upon. Hack logins originated from Europe, from an "AOL-like" provider.

[Vidyne]

Isn't it possible to send an email to anyone, spoofing the source email to whatever you like?(depending on security at mail servers and the user's ability/knowledge)

Hacker@someaddress.com can send a mass email and have it appear to come from eqtrader's address?

But the question would be how he could obtain those email addresses. Viewing the public profile doesn't show the email address and not sure of a way to find them to my knowledge.

Just a thought. If samanna has been hit, then I guess its more probable that eqtraders did as well?

[Niami DenMother]

The chances of it being "simple" spoofing are pretty close to nil, due to the folks who have received it having no common denominator other than being registered for our forums.

There is an admin feature to mass-mail folks registered for our forums, but we've never used it. However they managed it, it looks like they managed to access that feature.

To say I am unhappy right now would be an understatement.