Fallout from the Patreon security breach - Page 1
Forum section: electronics / general

author: SeanB
author_rank: Super Contributor
timestamp: November 21, 2015, 05:41:35 am
content: So, this turned up in my Spam folder, sent to a few Gmail addresses, apparently from "Sophie" using AOL ( they still are around?) as the relay.QuoteQuoteAll they got there was an email address, so the rest of the mail is not applicable, as I do not have a SSN, DOB or any other detail there on Patreon. IP is spoofed, so likely done with an AOL web based client, the Javamail ID being a giveaway.Just posted here in case anybody gets this, and is worried.Do not pay the Danegeld!

author: Deathwish
author_rank: Unknown
timestamp: November 21, 2015, 05:45:40 am
content: Dear SophieThank you for your email. However we ( hackers united) would like to tell you that the pictures we have of you are somewhat disconcerting, it is not often we see a 79 year old wrinkly female having sex with a horse. You have 24 hours to send US a bitcoin or it goes on pornhub

author: EEVblog
author_rank: Unknown
timestamp: November 21, 2015, 07:18:15 am
content: That's a rather clever scam.Just buy a huge email list from whereever, send that email to millions of people, X percent will use Patreon, and Y percent of those will be scared enough into handing over a bitcoin.

author: EEVblog
author_rank: Unknown
timestamp: November 21, 2015, 07:26:12 am
content: I got the same email in my gmail spam folder as well:QuoteIt comes from sharingservices@aol.comand has the return address kakashi.28@live.comHeading is "Ariana recommends : I will leak your identity"Same text as above.They sent the email to three "dave@e*.*" in alphabetical order.

author: AndyC_772
author_rank: Super Contributor
timestamp: November 21, 2015, 08:09:25 am
content: Same sh*t here too, in the spam folder where it belongs.Dave, the card I had registered with Patreon has expired now anyway, but in the light of the breach, I'm not going to give them a new one. What's the next best way to keep supporting you?

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 21, 2015, 08:13:39 am
content: Got one too, so I don't feel left out.

author: EEVblog
author_rank: Unknown
timestamp: November 21, 2015, 08:47:07 am
content: Quote from: AndyC_772 on November 21, 2015, 08:09:25 amPayPal david@alternatezone.comOr buy stuff on amazon through my link.

author: helius
author_rank: Super Contributor
timestamp: November 21, 2015, 08:56:29 am
content: Quote from: SeanB on November 21, 2015, 05:41:35 amI always knew SPF was useless!

author: Kean
author_rank: Unknown
timestamp: November 21, 2015, 09:06:45 am
content: I just got it too. Being an Aussie I don't think I'm too worried about my SSNChecked my mail server logs and the IP address is valid AOL server (different host, but same /24 as SeanB), so SPF not really at fault here - AOL and the spammer are.

author: Kean
author_rank: Unknown
timestamp: November 21, 2015, 09:13:36 am
content: Reported toaol_phish  abuse.aol.comin case that helps

author: Chipguy
author_rank: Unknown
timestamp: November 21, 2015, 09:24:57 am
content: Quote from: EEVblog on November 21, 2015, 08:47:07 amSince patreon states that they also have to collect 19% VAT on top of my pledge I may leave patreon as well and support dave directly via paypal.However, last time I checked they didn't collect the tax for some reason.The only thing preventing me from doing so is that I wouln't be able to watch the "early patreon previews" anymore....bummerI got the same spam email btw.What I have done to be able to identify those false blackmail spams more easily is that I changed my email address with patreon.Since I can just create a new forward email address easily its a good way to go.Gonna do that with each site I register in future. Every site gets its own email address so I can identify if the info is really from that site.And not going to use each dedicated email address for anything other than logging in to each particular site and getting email notifications from each.

author: SeanB
author_rank: Super Contributor
timestamp: November 21, 2015, 10:56:46 am
content: I support Dave on Patreon, and as the hoops you have to go through to watch the video on the embed they use is so many redirects I do not bother, just use the "Latest pre release video" page in the supporters lounge instead, which goes direct to the unlisted upload on YT, where I can do a like along with a watch.Might just do the easy Paypal recurring payment option as well instead of Patreon, though there I do use a paypal account in any case. I can never remember my paypal pasword in any case, way too long, so it sits in a small notebook that I keep in the room. Only good thing about Patreon is that you can support a few people together with a single payment.

author: adencraft2k
author_rank: Newbie
timestamp: November 21, 2015, 11:42:12 am
content: I also got the same emailI forwarded the details on to Patreon and this was their response:Quote

author: janoc
author_rank: Super Contributor
timestamp: November 21, 2015, 12:25:59 pm
content: Quote from: helius on November 21, 2015, 08:56:29 amDo you actually know what SPF is for? That IP is a mail server at AOL (taclomr-a003e.mx.aol.com), so it is quite normal that it is labeled as a permitted server.SPF doesn't protect against company resources being abused, it only protects against spoofing (aka someone trying to send e-mails claiming to be from paypal.com and asking you to "verify your account").

author: JDSween855
author_rank: Newbie
timestamp: November 21, 2015, 01:55:35 pm
content: I just received the same email this morning. Interesting ,really. I found the Patreon data dump the hackers put to the web and am looking at it to see what the hackers really got. I agree with the notion that some idiot just sent out spam hoping to hit people that have Patreon accounts. I am also thinking of going back to PayPal, but would like to see the pre-videos. For some reason I cannot get into the supporters lounge, should probably check that sometime. Dave?The only thing that really interests me, is they have my full name right in the spam letter .....

author: Chainsaw_
author_rank: Unknown
timestamp: November 21, 2015, 02:42:55 pm
content: Just got it here with a different reply-to, quite clearly a scattergun approach as there are 3 mail addresses in the to-list, only one of them mine.

author: dexters_lab
author_rank: Unknown
timestamp: November 21, 2015, 06:42:10 pm
content: same here and it arrived through my the unique patreon email address i used. Note the BTC address is the same as the one Sean posted so not unique at allthey will be getting bugger all from me!Quote

author: EEVblog
author_rank: Unknown
timestamp: November 21, 2015, 09:53:53 pm
content: The Patreon CEO ddin't muck around, I got this email overnight:Quote

author: funkyant
author_rank: Unknown
timestamp: November 21, 2015, 11:20:53 pm
content: Yep. Can confirm I received this also.Quote from: EEVblog on November 21, 2015, 09:53:53 pm

author: orion242
author_rank: Unknown
timestamp: November 22, 2015, 08:19:00 pm
content: Well that's reassuring then. I didn't get the email from the CEO, but I had them delete my account shortly after this crap.So it would appear, on the surface at least, that they do really delete the accounts.

author: JoeN
author_rank: Frequent Contributor
timestamp: November 22, 2015, 08:25:33 pm
content: Quote from: EEVblog on November 21, 2015, 07:18:15 amUntil they ask someone like you for your SSN. What do they call it in Australia?