Hot Summer Deals are Here!
Celebrate with up to 99% off on 17,200 resources
03
Days
04
Hours
29
Mins
42
Secs
I was hacked
- Thread starter Crystal
- Start date
- Status
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.
I think there was a huge databreach
Sort of. Basically when I use the password 3 times I use another one. And I also think it was this as well
I was a kid when I first started making accounts, Now ofc I know it is stupid silly thing to leave the passwords the same
You should probably change your passwords to unique with a password generator or just use random letters and then use something like lastpass or 1password, or just put your passwords on a txt file, or if you don't trust that, a sticky note..
Do you have the TID?
Before I always used the same password, but one day my Amazon account was hacked with all my bank identifications on it 
Luckily, to connect to my account it needed validation with an SMS code so the guy nothing could order. But since that day, I have taken a password manager and for each website I go to, I have a different password. It's so much better, now if a site is hacked, I only have one password in the wild. :tup:
Luckily, to connect to my account it needed validation with an SMS code so the guy nothing could order. But since that day, I have taken a password manager and for each website I go to, I have a different password. It's so much better, now if a site is hacked, I only have one password in the wild. :tup:
How is it not related? He knows what he's talking about. I mean when I saw the screenshot, the first thing I thought is that the domain is owned by some alt shop and is used to take over mass amounts of NFA accounts. Looking up the whois records on the domain pretty much confirmed this.
From OP's screenshot:
WhoIs lookup:
Googling the domain results in many more cases like this, specifically pertaining to Mojang:
How it works is these people just run "NFA" (Non-full access) aka email + password accounts with security questions. If they get valid accounts, they likely use the "NFA to FA method" in an automated way. The method allows you to move the email of accounts with security questions. This is what happened to MisfitNerd's account: https://www.mc-market.org/threads/573775/ except his account was likely targeted.
The alt shop that 0n. mentioned seems to have recently started selling "MFA" accounts, so it is indeed quite possible that this is their domain. Could easily be confirmed by asking from someone who bought from them anyway.
thanks for that screenshot. didn't even see that domain that 0n. was talking about. makes sense now.How is it not related? He knows what he's talking about. I mean when I saw the screenshot, the first thing I thought is that the domain is owned by some alt shop and is used to take over mass amounts of NFA accounts. Looking up the whois records on the domain pretty much confirmed this.
From OP's screenshot:
WhoIs lookup:
Googling the domain results in many more cases like this, specifically pertaining to Mojang:
How it works is these people just run "NFA" (Non-full access) aka email + password accounts with security questions. If they get valid accounts, they likely use the "NFA to FA method" in an automated way. The method allows you to move the email of accounts with security questions. This is what happened to MisfitNerd's account: https://www.mc-market.org/threads/573775/ except his account was likely targeted.
The alt shop that 0n. mentioned seems to have recently started selling "MFA" accounts, so it is indeed quite possible that this is their domain. Could easily be confirmed by asking from someone who bought from them anyway.
What link was that for me it says [Censored]
A known competitor of MCM.
- Status
