update: is not a phishing mail. Is from wordpress according to staff answer on following thread: https://en.forums.wordpress.com/topic/phishing-email-received/
+
same issue on 2017... this sucks!!!
+
+
grrrr you can check your email at https://haveibeenpwned.com but who owns that website????
+
-:-) it was on Taringa that my account was compromised:
"
Breaches you were pwned in
A "breach" is an incident where data has been unintentionally exposed to the public. Using the 1Password password managerhelps you ensure all your passwords are strong and unique such that a breach of one service doesn't put your other services at risk.
Taringa: In September 2017, news broke that Taringa had suffered a data breach exposing 28 million records. Known as "The Latin American Reddit", Taringa's breach disclosure noticeindicated the incident dated back to August that year. The exposed data included usernames, email addresses and weak MD5 hashes of passwords.
Compromised data: Email addresses, Passwords, Usernames
"
Otro correo esta a salvo pero un tercero no :-/
+
"
Dropbox: In mid-2012, Dropbox suffered a data breach which exposed the stored credentials of tens of millions of their customers. In August 2016, they forced password resets for customers they believed may be at risk. A large volume of data totalling over 68 million records was subsequently traded online and included email addresses and salted hashes of passwords (half of them SHA1, half of them bcrypt).
Compromised data: Email addresses, Passwords
"
"
Exploit.In (unverified): In late 2016, a huge list of email address and password pairs appeared in a "combo list" referred to as "Exploit.In". The list contained 593 million unique email addresses, many with multiple different passwords hacked from various online systems. The list was broadly circulated and used for "credential stuffing", that is attackers employ it in an attempt to identify other online systems where the account owner had reused their password. For detailed background on this incident, read Password reuse, credential stuffing and another billion records in Have I been pwned.
Compromised data: Email addresses, Passwords
"
"
gPotato: In July 2007, the multiplayer game portal known as gPotato (link to archive of the site at that time) suffered a data breach and over 2 million user accounts were exposed. The site later merged into the Webzen portal where the original accounts still exist today. The exposed data included usernames, email and IP addresses, MD5 hashes and personal attributes such as gender, birth date, physical address and security questions and answers stored in plain text.
Compromised data: Dates of birth, Email addresses, Genders, IP addresses, Names, Passwords, Physical addresses, Security questions and answers, Usernames, Website activity
"
################
I have just received a mail from passwordhelp at wordpress dot com
+
Sent via bounces dot wp dot com and signed by wordpress dot com
+
It seems a real mail from Wordpress :-/
+
My password has been compromised and appeared on an external list with my login wich is my e-mail address.
+
So i better think on a new long passwors with letters, numbers, odd characters, special characters and some caps letters in the mid... :-/ and change all my passwords since i don't know wich other e-mails are linked to the wordpress account email i used...
+
OMG!!! It gonna be a long night :-(
Too many accounts and passwords...
+
Mail received few hours ago on 18th of July 2018...
+
"Your WordPress.com password has been reset
+
Sent via bounces dot wp dot com and signed by wordpress dot com
+
It seems a real mail from Wordpress :-/
+
My password has been compromised and appeared on an external list with my login wich is my e-mail address.
+
So i better think on a new long passwors with letters, numbers, odd characters, special characters and some caps letters in the mid... :-/ and change all my passwords since i don't know wich other e-mails are linked to the wordpress account email i used...
+
OMG!!! It gonna be a long night :-(
Too many accounts and passwords...
+
Mail received few hours ago on 18th of July 2018...
+
"Your WordPress.com password has been reset
+
Howdy,
Your login credentials were recently discovered in a list of compromised accounts published by security researchers. This list was not generated as a result of any security issue on WordPress.com, but rather an external site or service that you also use being hacked and their user data leaked by the attackers.
For your security, we have temporarily locked your WordPress.com account (***********).
Until your password has been reset you will not be able to access your sites:
++++
ONLY LINK ON THE EMAIL IS THAT WORDPRESS SITE.
++++
To request a new password and regain access to your account, please click the "Lost your password?" link on the WordPress.com login page and follow the instructions.
It is very important that your new password be unique. Using the same password on different web sites increases the risk of your account being compromised. Now would be a good time to go through all of your online services and set distinct, strong passwords for each.
Once your password has been changed, we strongly recommend making your account even more secure by enabling Two Step Authentication under the Security section of your Profile menu.
- The WordPress.com Team
Thanks for flying with Wordpress.com
+++++
And that sentence is linked too, but blocked.
I have always remote images blocked.
All seems ok, i mean it looks like being sent from wordpress but the site they refer is not mine...
password reset, stolen, password, contraseña, cuenta, taringa, robo, datos, compromised, login credentials, list, published list, hacked, hackers, hacked, wordpress, mail, correo, scam, phishing
