There have been a number of people getting DCS password reset requests sent to their e-mail addresses.
The DCS accounts that have your purchase history and add-on keys may have been compromised in some way. They obviously got our e-mail addresses and started spamming some of them with password reset requests. So it may just be an email leak.
Which means watch out for phishing emails, especially regarding the subject of DCS.
http://forums.eagle.ru/showthread.php?t=133015
Yep. I got two emails.
I didn't realize, until reading one of the threads pertaining to this, that there was some kind of screwy hackery or DoS attempt a week ago over there?
I hope they will inform us as soon as any of our personal info gets pulled from their site(s). Not sure that will be the case. ???
Just be wary of clicking on links in unrequested emails that seem to be from DCS.
Yup some guy tried to change my passwords as well.
Got two emails too.
The ED support forum has a thread about it stating there is no need to change your password. The attack was blocked.
But just to be sure I am going to change it nonetheless.
Quote from: Yskonyn on October 31, 2014, 05:25:58 AM
Got two emails too.
The ED support forum has a thread about it stating there is no need to change your password. The attack was blocked.
But just to be sure I am going to change it nonetheless.
No don't! It's a trap. You might be lead to a phishing link. >:D >:D
Quote from: Yskonyn on October 31, 2014, 05:25:58 AM
Got two emails too.
The ED support forum has a thread about it stating there is no need to change your password. The attack was blocked.
But just to be sure I am going to change it nonetheless.
I'm not gonna worry about it too much at this time. If they had made off with more info, we wouldn't be getting all the spammed with p/w resets.
However, I wouldn't say they were completely "blocked" if all the user emails were pillaged from the DCS server (which is also your login name). :idiot2:
Quote from: Nefaro on October 31, 2014, 10:44:47 AM
I'm not gonna worry about it too much at this time. If they had made off with more info, we wouldn't be getting all the spammed with p/w resets.
However, I wouldn't say they were completely "blocked" if all the user emails were pillaged from the DCS server (which is also your login name). :idiot2:
It seems unlikely to me that hackers would have pinched passwords but not usernames...and email addresses in this case. Think I'll change my password just to be safe, using the ED website instead of the links from the email. I suspect the links are valid, but why take the chance when the alternative is so easy.
For the last few months my work has been testing employees by sending out fake phishing emails on a regular basis. Click on one of those links and your cut off from email services until after completing an anti-phishing course. Guess I'm proof the program is working.
I haven't used the link in the email either. I just logged into my account on the DCS website and changed it there.
Is it happening again ? Just received this mail :
Digital Combat Simulator: Password change request
noreply@eagle.ru
To
me
Today at 3:04 PM
Informational message from Digital Combat Simulator site
------------------------------------------------------
To change your password please follow this link:
http://www.digitalcombatsimulator.com/en/auth.php?change_password=yes&USER_CHECKWORD=2ff059c4e7f9e9c1dc1ca8aeeaa7b8b5
Yeah me too.
me three.
Just received this today from Eagle Dynamics:
Quote from: TFC/ED Email
Dear user!
If you received a letter with password change request, please ignore it. It was sent to you by a mistake.
The Eagle Dynamics Team.
LOL
Better late than never? ???
And another here ::)
hmm.. i didn't get anything last time.. and I didn't get anything this time! I should check and see what email I used on my account!
Also received the email and updated my password via the website.
There was some good news though. Noticed my key for the Bf 109 K-4 Kurfürst has appeared, and suspect the beta build should now be available for d/l.
no luck grabbing the Me109 files. I noticed a release date of Nov 14 on the website so shouldn't be too far off now.
(https://www.grogheads.com/forums/proxy.php?request=http%3A%2F%2Fwww.digitalcombatsimulator.com%2Fimages%2Fkurfurst%2F19_thumb.jpg&hash=c6afd18c60787d73f927881e7e4828a083f3c3af)
Yay, I just got my 'ignore' email.. so don't feel left out.. even though I didn't get the first email..
So someone is messing with our accounts again?
In an unrelated note, recently, my Antivirus (avira) flagged some DCS A-10 files as potential threats. I have no choice but to quarantine them.
Quote from: jomni on November 20, 2014, 08:14:56 PM
So someone is messing with our accounts again?
In an unrelated note, recently, my Antivirus (avira) flagged some DCS A-10 files as potential threats. I have no choice but to quarantine them.
No. ED sent an email saying "we accidentally sent you password change request emails. Don't worry." So someone running their site is just flipping the wrong switches, when doing something.
I'd estimate that your AV program is giving you false positives. Sometimes happens with games that have more draconian DRM contained within. Such as the kind that checks for hardware changes. Those have a higher tendency to get flagged in the AV heuristic scans.