Possible New Hacking Method?

[anjuna]

My friend, in the middle of trying to finish the Altador Plot (on the healing the Valeous stage), was abruptly logged out and redirected to a new sign-in page for the Altador Cup saying to play he had to create an account/pet and to click to create one (though he has an account AND a neopet) with a different name and password already entered, and with the password entered in plain view (not hidden)! (He sent me a screenie.)

I post this in case others might encounter such. Be very careful, folks!

I also received an unrelated neomail a few days ago, telling me I could log into anyone's account, even a Neopets admin's account, and the site was a fairly decent rendition of the actual neopets login page with the exception of not being Neopets of course. Scammers be damned!

I am posting links to scammer-screenies so you know what to look for.

http://esnips.com/doc/5e51d4e5-2b50-4ac ... r12357.jpg

http://esnips.com/doc/85d2a979-d51f-41e ... /moolz.jpg

http://esnips.com/doc/bd720b61-7c2a-4f2 ... ltacup.jpg

EDITED: Apparently the Altador Cup Sign In page is not a scam per se.

Last edited by anjuna on Mon Jun 19, 2006 11:13 pm, edited 1 time in total.

[Q]

They have a signup going on for the Altador Cup. If you're not logged in and on an Altador page, you'll see login info. TNT hands you a funky username like wocky_jokester_18300514 or blumaroo_juggler_1348143 and a short numerical password.

It freaked me and some friends out too! Just refresh on the page, you'll see the username and password keep changing each time. Try looking up any of the names, you'll see they don't exist.

I'm guessing it's for kids who saw the AC commercial on Nickelodeon or perhaps they've got some internet ads somewhere with a link that takes people there. I guess they figure more people will sign up to play Neopets if there's a username and password ready to go?

[anjuna]

Interesting. Thanks for that. But he was on an Altador-related page and logged in. Strange. Well the password in plain view is never a good thing. The other two screenies I posted are a legit scam attempt so I will Edit.

[Nefasturris]

I also received an unrelated neomail a few days ago, telling me I could log into anyone's account, even a Neopets admin's account, and the site was a fairly decent rendition of the actual neopets login page with the exception of not being Neopets of course. Scammers be damned!

I got that neomail yesterday, since the link was offsite I didn't go there in case of cookie grabbers. I just reported the person. That's always the best thing to do with obvious scammer neomails (Go here and get NP/DreamPet/NP Generator/Etc)

[Teelie]

Definitely Neomail TNT and report the scammers. The scammy-looking legitimate one is just a strange way of getting people to sign up though, and probably will cause a lot of reports.

[anjuna]

Definitely Neomail TNT and report the scammers. The scammy-looking legitimate one is just a strange way of getting people to sign up though, and probably will cause a lot of reports.

What is odd to me is that this person was in the middle of a "game" (mind you the 10 minute Valeous sequence, necessary that it isn't interrupted!) clearly logged in, clearly with a pet, and TNT has to go pull this Altador Cup crap?! Round 2 is even over. Practice rounds are happening now.

This person is on dial up and still braving the plot mostly at my encouragement only, and ended up having to go to sleep before reattempting to finish that part of the plot this late (his night in Germany).

I feel like some strangely familiar Yurble.

[Cynthia]

Well hey ain't the first time TNT decides to feel nice and introduce you to something new they've created regardless of what you were doing.

[es.dee]

I used to have this big issue without logging out and logging in problems.. I then realized my computer date was wrong So it was the reason for that logging out.

Yeah when I saw the altador cup sign in thing I was like o.o Whoa. Then I realized what it was there for funny.. I nearly panicked.

[The police! Run!]

What's the URL to the admin login page?

[Keylia]

Good to know I wasn't the only one freaked out.

And I don't think we should post links to scammer sites.