Email sent today stating your account will be upgraded is not from us

Yeah it's pretty clear the photo.net user database has been compromised (otherwise how are you pairing names and photo.net specific email addresses). Photo.net admins should not be sending out an email suggesting people ignore the phishing messages. Instead they should be focusing on how they were compromised, and once remedied they should require password resets for all users.

ditto

I just got this email as well and while looking through the photo.net site I was unable to find a way to cancel. I tried using the form on the contact page and I received an error so i ended up clicking the link in the email. I realized once it downloaded a file that it was a scam. I deleted the downloaded file but now i'm worried my computer is compromised. Does anyone know what can happen from clicking the link?

If all you did was download the file, but did not run the file, it is not likely that your computer is affected.

 

If you landed at a website that displayed images or ads, there is a small possibility that something was downloaded and/or executed without your knowledge. If you find any files on your system that you can't identify, don't open them. The really nasty stuff shows its face pretty quickly. I would consider making a backup of your important work now and removing the backup files from any connected device, just to be safe.

a notice has been posted on the home page as soon as we could get one up. [ATTACH=full]1210454[/ATTACH]

Should be bigger. I missed it coming here today to see if anyone else was complaining about this. Like others in this thread, I would like very much to cancel my 'account' at photo.net. I haven't used it with any regularity for years. Please direct me to the exit.

i must've created this account in 2005 and haven't visited the site since. received the phishing email. How do i delete my profile/account from this site?

I got exactly the same

 

Sounds like Photo.net has been breached.

 

How do I close my account completely?

Is there a possibility that the breach occurred with an outdated version of the members' database, as it appears to be mainly people who have been members for a long period who have been affected by this ? Just a thought.

Why is it that the only members 'threatening' to leave are ones we never knew were here in the first place ?

 

It's very simple. The site is laid out in such a way to make it difficult to close one's account. So, people sign up, find that the site is not for them, but then can't figure out how to close their accounts. They give up. Time passes. The site is breached and its data assets are obtained by hackers. The lowly shadow people get an email. They come here to annoy site regulars.

Over the years I have ended up signing in at photo.net on three different email addresses.

 

All 3 received a "notice" today - however none of the 30 odd other email addresses that regular receive spam did.

 

I am certain that the photo.net mailing has been stolen somehow.

 

Further more - I believe the correct thing to do NOW is email all accounts to warn them - before they click on the fake email and get hacked.

 

Putting it on the site here is far too late!

If all you did was download the file, but did not run the file, it is not likely that your computer is affected.

 

If you landed at a website that displayed images or ads, there is a small possibility that something was downloaded and/or executed without your knowledge. If you find any files on your system that you can't identify, don't open them. The really nasty stuff shows its face pretty quickly. I would consider making a backup of your important work now and removing the backup files from any connected device, just to be safe.

Thank you. I'm really annoyed that I fell for this. I make it a rule never to click on anything I receive in emails.

As asked before, How do I close my account?

Is there an admin that can/will answer this simple question?

I also received 2 emails re upgrade and charge to my account. I immediately tried to sign in via the Legit Photo (dot)net site but couldn't remember my password, so requested a new password reset. I also checked by mouse-over the links in the scam email and saw that they were not photonet links, but a zip file. I immediately deleted both emails. If I receive an email requesting stuff from me, I ALWAYS check the validity before doing anything with the email. safety practice number one. Now...how do I change my User Name? I have already changed my password.

I received the "Subscription Confirmation" email as well (identical to the one pasted above).

 

I agree with the others in this thread: not sending out an email to affected people (or barring that, all subscribers) is near-Equifax levels of irresponsible. Very few people will think to check the Photo.net homepage and fewer still may notice the black bar with 0.5em font.

 

If you're savvy enough to be commenting on this thread, you probably already realize that a safe assumption is that Photo.net was breached and your account information was compromised. While they continue their investigation, it's probably smart to change your password (and passwords on accounts that share the same password -- not that anyone would do this, of course!). Given the lack of expedient and forthright communication from Photo.net today, I wouldn't wait...

Edited September 21, 2017 by shiva_mayer

Trying to change my password and I get: current password is not correct. Which is BS as I am using it on a daily basis to log into PN. And I just tried it in a different browser and the current password works. No idea what PN has on file! Another bug in the system or evidence/result of the recent attack?

not sending out an email to affected people

I just received warning email from PN.

Edited September 21, 2017 by Dieter Schaefer

Yeah it's pretty clear the photo.net user database has been compromised (otherwise how are you pairing names and photo.net specific email addresses). Photo.net admins should not be sending out an email suggesting people ignore the phishing messages. Instead they should be focusing on how they were compromised, and once remedied they should require password resets for all users.

We are doing both - we are notifying people of the email earlier today by email and banners our goal is to let people know not to click on it because it was not from us.

I received the "Subscription Confirmation" email as well (identical to the one pasted above).

 

I agree with the others in this thread: not sending out an email to affected people (or barring that, all subscribers) is near-Equifax levels of irresponsible. Very few people will think to check the Photo.net homepage and fewer still may notice the black bar with 0.5em font.

 

If you're savvy enough to be commenting on this thread, you probably already realize that a safe assumption is that Photo.net was breached and your account information was compromised. While they continue their investigation, it's probably smart to change your password (and passwords on accounts that share the same password -- not that anyone would do this, of course!). Given the lack of expedient and forthright communication from Photo.net today, I wouldn't wait...

 

An email was sent out to all on our list - NOT TO CLICK ON ANY LINKS from earlier said email.

Over the years I have ended up signing in at photo.net on three different email addresses.

 

All 3 received a "notice" today - however none of the 30 odd other email addresses that regular receive spam did.

 

I am certain that the photo.net mailing has been stolen somehow.

 

Further more - I believe the correct thing to do NOW is email all accounts to warn them - before they click on the fake email and get hacked.

 

Putting it on the site here is far too late!

 

This was done as soon as we could get the email out.

We are doing both - we are notifying people of the email earlier today by email and banners our goal is to let people know not to click on it because it was not from us.

 

I haven't received anything other than the two phishing messages. Going back, the last legit email I got from photo.net was a password reset message on July 30th. That password reset message is quite easy to mistake for spam or phishing as you guys don't have DKIM, SPF, or even a reverse DNS entry that would make your mail server look like a legit part of photo.net set up. Seriously, your legit mail comes from buydomains.com.

Fiendish simulation by the rascals. My alert radar has to learn to keep up.

I downloaded the "terms and conditions", but didn't open it when I saw it was a javascript file. I did scan it with Malwarebytes, which found it clean....

I got the e'mail....flushed it!

As far as subscription renewal. There should only be an opt in and never a default renewal. Not part of any contractual arrangement. Let us know -once more if there is an opt in versus and opt out..I have not decided as of now, but will consider it.

I got the phishing email this morning (similar but slightly diff from that posted above) but have not received anything from photo.net about not clicking on anything.

Glenn, you need to reprimand your security VP and refund those whose emails have been compromised. And by that, I mean all those who have made recent payments (in the last year, say, since Feb just before V2) that extend into the future. Our security is at stake. How are people supposed to cope with Trump, Brexit, Kim Wrong-Un and now this?

Glenn, you need to reprimand your security VP and refund those whose emails have been compromised. And by that, I mean all those who have made recent payments (in the last year, say, since Feb just before V2) that extend into the future. Our security is at stake. How are people supposed to cope with Trump, Brexit, Kim Wrong-Un and now this?

 

Norman, if you can 'see' anyone or anything resembling a "Security VP" then please send me a gram or two of whatever you are smoking... :cool:

 

Remember, this is the place that a couple months ago let its SSL security certificates expire.

 

Some days I feel rather sorry for Glen and the situation he finds himself in. This day was one of them. :(

 

BTW, Alex Jones says that all of the culprits you cite above are in cahoots with each other in a giant conspiracy to gain control of Miley Cyrus' tongue. I know it's true because I heard it repeated on "Faux & Friends." How we figure into this has not yet been revealed. Expect our Fearless Leader to tweet something inane soon! :eek: