Are other people getting this banner at the top of the page?
"We've had 6 confirmed cases of supporting members having their accounts hacked, because of password reuse. The hackers then use your account to post FS ads and steal $. Please use a unique password for TalkBass. Better yet, turn on two-factor authentication. Check your email at https://haveibeenpwned.com to see if your personal info has been leaked by previous security breaches at other sites."
Just wanna make sure that it is not something that is invading my personal space. When there are links, to click it makes me a little skeptical.
Yeah, I got it. Went to it. Says I've been hacked(?). Offered to let me know who, how many...for a fee.
Yes. I don't click on links like they posted. How do I know that TB hasn't been hacked.
I got this as well. It has all the hallmarks of a scare tactic scam to get you to click a link that will cause you problems. If TB has been compromised and my account was impacted I would expect to be contacted by a site administrator directly.
I have the report card reputation for "does not listen to, or follow, directions" when it comes to forwarding chain letters, mindlessly repeating others' posts on FB, or for clicking unsolicited links, especially if they mention hacking.
In this case, here on TB, I now do a
Search on the homepage and click on "More ...". There I click on the "Search in Forums" space where it says "All Forums". Then, on the pop-up list, I
un-select "All Forums" and go down the list and select "Classifieds [BG]" and "Classifieds [DB]", then click "OK" at the bottom of the list. Now the "Search in Forums" space says "2 selected". Then I enter my username in the "Posted by Member" space and click the "Search" button. Then I can review the list to see if there are any posts that appear to be by me that I did not actually make! That will reveal, to me, if my TB account has been hacked without giving my email address or password to another website.
Even if I get a very legit looking email that appears to be from one of my other online accounts, no matter for whatever legit sounding reason, I never click the link in the email. Instead I login to that account by my own, separate navigation, and do my own checkup from there.
Only a few times in my life did I ever get a phone call(!) from someone requesting logon or password "identification" that turned out to be legitimate. And those few had no problem with my precautionary insistence on me calling those entities myself, using my documented numbers, to get back to them. They all said they were very glad I did that, and that I wouldn't believe how many people just tell 'em whatever they ask on the first call they ever give 'em!
But I
do believe it!
.
