hey, guys, i know this is a forum where i need to request a ban but my account LoudEcho was banned today because a few days ago i clicked on a pm that contained a link to a phishing site. i want to know if i can get unbanned. i changed my password as soon as i clicked and realise it. so pls, can i get unbanned?

You deserve most of the credit for acting as quickly as you did. Especially since I didn't want to try the passwords.
Some of those posters don't understand why they have been banned and want their accounts back. And they are posting or having friends post in the strangest places. Do you have any plans for reinstating them? They obviously would need a vouch from a reputable person or confirm their identity in some other way. Pretty similar to the people that lost access after the 2p2 hack.

Very good advice for the future.

If anybody is not sure about her/his past behavior.
Search your cookies for "twoplus".
You'll have a bunch of cookies from forumserver.twoplustwo.com. That's normal.
If you have one cookie from a site that has a very similar name, then you made the first mistake of clicking the link.
The cookie in itself is harmless and you can just delete it, but I'd still recommend running a virus scan.

The reason I didn't post anything publicly is that I'm quite sure that the phisher is reading this thread and don't want to educate him by pointing out his mistakes. But since I'm so sure he's reading this post I might just ask him a question: "Did you really expect anybody to sent you the 40$ on pokerstars back in October?"

Well, it was a very nice spot by you, and thanks for passing it along. Also wise not to try logging in to the accounts yourself.

2 of the 9 have found their way to contacting us; one is restored and I'm working on another. You're correct that we're going to need to establish that they are the legit owner of the account; what they should be doing is contacting the site via email - there's a "Contact Us" link at the bottom of every page on the forums, I believe. Also, my 2+2 email address is in my profile.

Hey Guys!

This is my new account, Bejek was my old one.

I really need to express from myself what happened. I visit 2+2 from 2009 and although I wasn't very active in the past, I have read a lot of stuff and topics. Last time I logged in was on Tuesday and yesterday when I tried to log in my account was banned.

I DID NOT SEND ANY OF THESE MESSAGES YOU PRINTSCREENED, EVEN THE SECOND ONE! And to be honest, I don't even know what's going on, I just wasn't online yesterday...

I am completely legit and trustworthy person with a lot of connection in Czech Republic and I can't afford gossips about me being hacker/scammer/whatever. I have no problem about proving my credibility, whatever details I can give you about me.

However, I am really sorry about whatever troubles did my account cause you, I really am. I have no idea how did this happen, but fyi I have also hacked my account at fulltiltpoker and lost all my money there like 2 weeks ago So I guess someone just guessed (or found out anyhow) my password (I have the same at ftp and here at 2+2) and just scamms other people...

Sorry guys, hope it wouldn't happen again, if I can do anything to help please just let me know!

Bejek

The plot thickens...

We figured the 2nd one was still the hacker. Can't emphasize enough how important it is to have strong unique passwords. Given that many of the PMs originated from your account, we will not be reinstating it.

Welcome back on your new account.

Hopefully the Czech doesn't bounce.

So, GF2 appears to be the latest account of the phisher. He had only sent a handful of PMs so far, and the links were broken since the site is filtered now.

If it wasn't the end of the world tomorrow I'd ask for you to be banned

Bobo,

Found this in the "Ban me!" thread; moved here in case you missed it.

Already handled.

professional poker for mod

another one today

We need the actual link. Please forward it in a PM

http://forumserver.twoplustwo.com/56...lease-1282669/

I got one from the same guy today

Bump. I think he's back right now.

I believe I just received a phishing pm. I am forwarding the message to Mat as stated on page 1.

I assume it's this one?

http://forumserver - twoplustwo.**********.me/

If so, you're correct, and I've contacted them to have it shut down.

It doesn't appear the scammer has obtained any real passwords yet; I quite enjoyed this combo:

vb_login_username=****youphishingscammer
vb_login_password=yeahthisisnotmypassword

There's at least one more url. But Mike Haven banned the only potential victim minutes after the password was entered.

We got another one of these today.

Immediately forwarding any phishing attempts to Bobo/PP is the smart play here. PP had the link filtered and the PMs deleted in like 5 minutes.

I just received this PM reporting that phishing attempts are still being made on 2+2.




Hovering over the above link shows that it is not a 2+2 link (see the URL at the bottom left hand part of your page).

PLEASE report any questionable PMs to multiple moderators so the phishing 2+2 account that is sending them can be banned.

What if you hadn't been here in a few months, your account gets hacked, you've been a member for going on ten years (with two infractions throughout that time) but some idiot posts some crap with your screen name in a transfer thread (or whatever it was) "professional poker" (I use the term loosely) tells you to basically **** off, "use a stronger password next time" yaddidy yaditty blah blah blah. How would one deal with that? Oh I know! Bend over and take it up the ass. Nice seeing you all......

PS Great security here, just keep blaming the members.....LOL

What would be really helpful, if you'd be so kind, would be to let us know what your password was, or if it's something that needs to be confidential, give us an idea of the structure. If it was something very secure and unique to 2+2, then the next question would be if you had ever had a strange PM where you clicked a link and had to log in. Failing that, any chance that your computer was compromised in some way?

I understand that it can be frustrating when your account was compromised, you have no idea how it happened, and you get blamed. But here's the thing - this seems to be happening to a handful of accounts every month or two, and most of them we are able to trace back to terrible passwords or a phishing scam (we've seen the sites, and had a number of them taken down). So while I suppose it is possible that someone has hacked our site and just uses a couple passwords every once in a while, at the same time that someone else is making plenty of money from the much simpler methods of password guessing and phishing, it sure doesn't seem all that likely.

That doesn't mean there's no responsibility to improve things on our end - we've improved the login process, we shut down phishing sites as we find them, and we've also stopped allowing emails through the site. But we can use your help. I'm sorry to hear you feel you've been badly treated, but it's also pretty frustrating for volunteer mods when they go to all these efforts to stop scammers, and people keep enabling them by doing some of the most ridiculous things - not necessarily referring to you here, since I don't know your circumstances, but making a general comment.

can you also tell the people in transfer threads to stop sending cash to posters with no trade history? Without checking references or anything? That **** makes using password123 look perfectly intelligent.

another one banned

I added spaces around the ciki to disable this posted link.