pancakes

MicrostockGroup Sponsors


Author Topic: suspicious or strange payout request on istocphoto  (Read 10732 times)

0 Members and 1 Guest are viewing this topic.

« on: August 30, 2011, 12:13 »
0
Hi

I was wondering if anyone had situation like this and if its normal.

I haven't requested payout on istockphoto for quite time and today i recived e-mail in Russian from [email protected], I dont understand nothing.



My account is on 0$ and i see i have a pending payout on all my previous earnings , but im wondering is it pending to go on my account or...because this is at least strange for me.


What should I do and can I do something to see if it will processed to my moneybookers account as usual ?

I repeat , i haven't requested that payout


Thanks


« Reply #1 on: August 30, 2011, 12:26 »
0
I would contact support ASAP, by phone if you can and a ticket if not.

I believe they have a maximum payout amount of $10,000, so unless you reached that amount and they automatically paid you as a result, this sounds like a problem.

Is Russian your language for the site? That e-mail address is the one legit confirmation notices come from. Here's my most recent request (in English)

"Thank you for contacting iStockphoto. We have received your request and will respond as soon as possible.
Your Ticket Number is #nnnnn
To add additional comments, visit:
http://www.istockphoto.com/contact_ticket_comment.php?id=(ticket ID here)
Please use this link to contact us with more information regarding this ticket. iStockphoto may not receive replies to this email because the address is not monitored.
You may also find answers to many common questions in our online FAQ:

Please visit: http://www.istockphoto.com/faq.php
      
Issue/Question:
Your payout request for $nnn has been sent. You can checkout the scheduled payout date for your request at: http://www.istockphoto.com//user_payout_report.php?userid=(my user ID)      

IMPORTANT NOTICE: This message is intended only for the use of the addressee, and may contain information that is private, confidential or otherwise restricted from disclosure.  If you are not the intended recipient, any distribution or copying of this communication is strictly prohibited.  If you have received this in error, please notify iStockphoto.com immediately by contacting [email protected]"

« Reply #2 on: August 30, 2011, 12:31 »
0
Check your payment options and verify if your moneybookers info is correct.

Also contact IS if you didn't request the payout.

« Reply #3 on: August 30, 2011, 12:36 »
0
No Russina is not my language at all , never used it on istock:

I checked my moneybookers , and mail i think they were not hacked or something , and i created ticket

Here is the email , it looks like normal but i dont know


Благодарим Вас за то, что обратились в iStockphoto. Мы получили Вашу заявку и ответим на нее в ближайшее время.
Номер вашей заявки –  #1019062
Дополнительные комментарии можно оставить здесь:
http://russki.istockphoto.com/contact_ticket_comment.php?id=vVLX1XUZFZs%3D
Чтобы отправить нам дополнительную информацию по этой заявке, воспользуйтесь указанной ссылкой. Не отвечайте на это сообщение – мы вряд ли получим Ваш ответ, так как не проверяем входящую  почту по данному адресу.
Ответы на часто задаваемые вопросы можно найти в нашем разделе FAQ:

Пожалуйста, посетите: http://russki.istockphoto.com/faq.php

Проблема или вопрос:
Ваша заявка на оплату на сумму $full amount I had it was way las than 20 000 but more than 1k) отправлена. Плановую дату оплаты вашей заявки можно посмотреть здесь: http://russki.istockphoto.com//user_payout_report.php?userid=it was my id



ВАЖНАЯ ИНФОРМАЦИЯ: Настоящее сообщение предназначено только для указанного в нем адресата. В нем могут содержаться сведения частного или конфиденциального характера, или иные сведения, не предназначенные для посторонних.  Если вы не являетесь лицом, которому адресовано это сообщение, вам запрещено копировать или распространять его каким-либо образом.  Если вы получили это сообщение по ошибке, просим немедленно уведомить об этом компанию iStockphoto.com по адресу [email protected].

« Reply #4 on: August 30, 2011, 14:44 »
0
I'm happy to see (via the iStock Help forum) that Lobo cancelled the payment request and so this attempt to get at your funds has failed. Reminder to all of us to be careful about this stuff.

« Reply #5 on: August 30, 2011, 15:07 »
0
Good catch. This is a worst case scenario.

You should investigate how your account got hacked. Whether it was through your PC or your mobile device.

Which Internet Security are you using. Then I know what to stay away from ;)

Cogent Marketing

« Reply #6 on: August 30, 2011, 15:48 »
0
I too have had issues with my payment requests. On 22 August I deducted another 100 US $ plus amount form my account to be paid by cheque. No email was received confirming my request but the amount I requested was immediately deducted from my running balance, so I knew the transaction had occurred. Today, 30 August is the day that cheque payments should be actioned and posted (according to the payment schedule published by iStockphoto). No email confirmation has been received today stating that the payment has been made. I have sent a ticket to customer support asking what is going on. There has been no response.

Istockphoto owe me money - albeit a miserly 18% of what they have already banked as a result of my creative efforts - and I have no confirmation that I am being or am going to be paid.

Do I consult a solicitor and issue an action against them (because I most definitely will) or do I wait patiently and see if they decide to pay me what they owe me when they feel fit?

Having been around quite some time in corporate life - when bills begin getting paid late - it's usually a sign of trouble ahead, although maybe it's as I said in an earlier post a village somewhere is missing their  idiot...

« Reply #7 on: August 30, 2011, 16:19 »
0
Ya we solved that , now I scanned full system because my home computer is all i use when Im loggint into importaint sites including e-mail.

click_click , its Norton Internet Security  ;D

Anyway , whoever done that requested payout on his moneybookers account , so Im wondering ig IS should contact them and close his account or more of them.

As I remember MB are requiring all personal info conected to bank account an ID scan so they could find who he is , and stop him or her doing it again.

« Reply #8 on: August 30, 2011, 16:27 »
0
Ya we solved that , now I scanned full system because my home computer is all i use when Im loggint into importaint sites including e-mail.

click_click , its Norton Internet Security  ;D

Anyway , whoever done that requested payout on his moneybookers account , so Im wondering ig IS should contact them and close his account or more of them.

As I remember MB are requiring all personal info conected to bank account an ID scan so they could find who he is , and stop him or her doing it again.

He must have had your password. Have you ever given your password out to anyone, for instance to one of these microstock statistic gathering sites for example? Or was it genuinely hacked from your PC?

« Reply #9 on: August 30, 2011, 16:52 »
0
Perhaps someone has some experience they care to share about good ways to proceed when something like this happens - i.e. how to clean up to be sure the would-be thief can't get at anything of yours. I know avoiding the problem is best, but still might be worth thinking about recovery too.

I'd think you would want to change all your passwords - not just the one at iStock. Some recent advice I read was that password length was more important than letter/number mixes or other criteria (can't find the link to the article, but that link talks about length, special characters, etc).

What about e-mail address - should that be changed too?

« Reply #10 on: August 30, 2011, 21:35 »
0
0. CHANGE ALL PASSWORDS NOW. This would freak me out if someone else but me got that far without me knowing it.
1. Did you use any software or tools that require your iStock password?
2. Did you give out your password to anyone? If so did that person store the password somewhere else (paper note, cell phone entry etc.)?
3. Are you using a password manager on your computer, like Firefox's password manager that saves your passwords?
4. If so, does anyone else beside you have access to the computer? If so, who accessed it?
5. Is your internet security software up to date and configured correctly?
6. Scan your computer thoroughly for trojans etc.

- Ideally use a password longer than 10 characters including letters, numbers and symbols
- Never ever write down your passwords anywhere
- Do NOT save your passwords in a text file or Word document on your computer
- Do NOT use a password manager for any critical (financial, agencies etc.) sites. Keep those passwords in your mind
- Use a different password for every single site. If one gets hacked by brute force all other sites will still be safe!

Maybe this tip can help you to come up with a system to remember a different password for each site.

Think of a word which will be your core for the new password. Let's pick "Woodchuck"

Now you can create a different password for every single site without having to remember completely different passwords:

Let's say you create a new password for Twitter.

First you start off with the first 2 letters of the core password (Woodchuck):

Wo

Then you add the first letter of the site you are creating the password for (Twitter):

WoT

Then you continue with the next 2 letters of your core password:

WoTod

so you keep going until your core password ends:

WoTodwchiuctk

You can also create additional tricks such as having all letters of the site name (Twitter) capitalized:
WoTodWchIucTk

I hope this illustrates the idea. You can come up with your own rules for the core password or the site name. For instance you can insert the site name backwards etc.

Maybe someone can implement this.

I'm just happy that after years of losing and forgetting passwords I finally have a way with different password on all sites and I cannot forget it. Awesome. Your core password is the master key so to speak. Even if someone knew that they still don't know your combination :)

« Reply #11 on: August 30, 2011, 23:55 »
0
I too have had issues with my payment requests. On 22 August I deducted another 100 US $ plus amount form my account to be paid by cheque. No email was received confirming my request but the amount I requested was immediately deducted from my running balance, so I knew the transaction had occurred. Today, 30 August is the day that cheque payments should be actioned and posted (according to the payment schedule published by iStockphoto). No email confirmation has been received today stating that the payment has been made. I have sent a ticket to customer support asking what is going on. There has been no response.

Istockphoto owe me money - albeit a miserly 18% of what they have already banked as a result of my creative efforts - and I have no confirmation that I am being or am going to be paid.

Do I consult a solicitor and issue an action against them (because I most definitely will) or do I wait patiently and see if they decide to pay me what they owe me when they feel fit?

Having been around quite some time in corporate life - when bills begin getting paid late - it's usually a sign of trouble ahead, although maybe it's as I said in an earlier post a village somewhere is missing their  idiot...

I suspect it is simply their crap support - I had this issue last month - did not get paid on my payoneer and sent 4 emails asking why not, all of which were ignored - got paid a week later in the end but never did get a single response from support - nothing unusual there though.

« Reply #12 on: August 31, 2011, 01:48 »
0
0. CHANGE ALL PASSWORDS NOW. This would freak me out if someone else but me got that far without me knowing it.
1. Did you use any software or tools that require your iStock password?
2. Did you give out your password to anyone? If so did that person store the password somewhere else (paper note, cell phone entry etc.)?
3. Are you using a password manager on your computer, like Firefox's password manager that saves your passwords?
4. If so, does anyone else beside you have access to the computer? If so, who accessed it?
5. Is your internet security software up to date and configured correctly?
6. Scan your computer thoroughly for trojans etc.


1 - No only DeepMeta for uploading, i used some of those uploading sites like isyndica but not not for Istock because of the uploading proces and it happend only there, (I hope) 
2 - NO and NO
3 - I used Norton Logins with master password that I only know
4 - Nobody beside me and my gf and she didnt do nothing 100%
5 - Yes
6- Im doing it now

I really need to rethink how it happend...

RacePhoto

« Reply #13 on: August 31, 2011, 01:52 »
0
Ya we solved that , now I scanned full system because my home computer is all i use when Im loggint into importaint sites including e-mail.

click_click , its Norton Internet Security  ;D

Anyway , whoever done that requested payout on his moneybookers account , so Im wondering ig IS should contact them and close his account or more of them.

As I remember MB are requiring all personal info conected to bank account an ID scan so they could find who he is , and stop him or her doing it again.

He must have had your password. Have you ever given your password out to anyone, for instance to one of these microstock statistic gathering sites for example? Or was it genuinely hacked from your PC?

Most of the time when people have these kind of problems, it's not a hacked account or stolen information it's their own response to a Phishing email.

It starts with an email send rom a site immitating the real site:

"Your account with (Facebook, istock, paypal, bankname, Etc.) has bee suspended pending confirmation of your information.

account name
password

blah, blah, official sounding warning that you won't be able to access your account until you reply."

So people click the bogus link to the fake site and give up their password and id. Then a week later they wonder how someone hacked their account and got the email contacts or all their personal information. Well friends, You Gave It To Them!  :o

It's not impossible that someone hacked into a database of some Russian site and got your password and it's the same on IS. Or someone running a BB that you signed up for, using the same password, went to IS and logged in, changed the Moneybooker account and requested a payout. (probably to some other hijacked account, which they will forward the payment to themselves later)

But most of the time, people give away the information them selves! And the second part is most of the time, the people who have the biggest problems use the same password, everywhere for everything!

You don't have to lock your email account or change it, the account isn't "hacked" all you need to do is change your passwords everywhere that you used the same stolen password. Then go buy a cheap notebook and start using different passwords on all of your sites, or at least one for banking, one for micro, one for public bbs, another for facebook and twitter... and WRITE THEM DOWN so you know them.

Last of all, do what the other people here said, eight characters and at least one number so in the outside chance that someone is still running a PW software, you won't have a password that's in any dictionary. They can bang away all day and night and probably not crack your stronger password. "password3" is not as strong as "pa55word", just tagging a number at the end is hardly better than just letters.

I have a friend who has changed his email account three or four times, because he keeps getting "hacked" as he puts it. I know who's behind the problem and it's himself! He answers the phising emails, he uses the same PW on all sites, he uses a common word, no numbers and for all I know is still using the same PW on sites, after he changed email accounts, so he's an easy target! Then he says there someone hacking his email and his laptop has a virus. Yeah it does... he's the virus.  :D He also frequents illegal download sites for music and uses the same password there. Well Duh, a pirate site and your password gets stolen for your email account, when it's the same on both? That's brilliant!

« Reply #14 on: August 31, 2011, 02:15 »
0
Nope , not the case...

I had different passwords on all sites and its 100% i didn't log in into any Russian site with this one or any 1 , i never logged into a single Russan site. ;D

"It starts with an email send rom a site imitating the real site:"   -Never happened 100% , I never never log in to a site from a link only from bookmarks.


Fact is that the password for Istock wasn't strong and  had only 6 alphanumeric signs, oposite to my e-mail password which is very strong.


The thing  is that there was something wrong with my internet few days ago and until it was solved  I used free public unsecured network that my city offers in few spots and 1 is near my apartment , but I don't know if its possible for someone to take my passwords that way ?

Im still thinking....

« Reply #15 on: August 31, 2011, 08:04 »
0
The thing  is that there was something wrong with my internet few days ago and until it was solved  I used free public unsecured network that my city offers in few spots and 1 is near my apartment , but I don't know if its possible for someone to take my passwords that way ?

Im still thinking....

Ah. Being as the two events occured at about the same time as each other my guess is that they could well be linked. Interesting.
« Last Edit: August 31, 2011, 08:23 by gostwyck »

« Reply #16 on: August 31, 2011, 08:31 »
0
...
The thing  is that there was something wrong with my internet few days ago and until it was solved  I used free public unsecured network that my city offers in few spots and 1 is near my apartment , but I don't know if its possible for someone to take my passwords that way ?

Im still thinking....

There is an iPhone app called "Pirni" for example that scans open networks for packets of other Wi-Fi users around you.

Let's say you're at Starbucks or McDonalds where there is an open network, you can let the app run for 30 minutes in your pocket, sniffing all traffic within that network.

Once back home you have to extract the collected data and simply look for strings like "password" or "user" and there is a chance that within 30 minutes in a highly frequented place that someone is logging into their facebook or twitter account.

This is a really clumsy way of sniffing passwords and often the victims actively hand out their passwords without knowing e.g. phishing sites but the crooks know many ways how to screw with you.

Personally I never log into any site when using a public Wi-Fi network.
 

RacePhoto

« Reply #17 on: August 31, 2011, 10:36 »
0
Not accusing you, just a general warning to all. Use multiple passwords, don't "verify" locked accounts, your email isn't "hacked" (just the password is lost, and can be changed).

About the public networks, I had a guy across the room say once, I'm looking at your hard drive and your pictures. (in a media room network) I didn't care, but it did show that sometimes with things supposedly blocked, a person could see my computer. So absolutly, a public network can be a problem.

What's strange about the whole thing, is how fast your account login got to someone in Russia and how fast they went for a payout. Must have been someone collecting information, right where you were.

I suppose it's a reminder to me to change my passwords on the Micro accounts that actually make money, and leave it on the ones that are losers, so if they steal one, they can have the useless information.  ;D My two friends who send stranded in Madrid help messages (a scam from some hacker) both insist they didn't go online anywhere public. I think both of them answered locked account warnings and don't use more than two passwords for everything.


Nope , not the case...

I had different passwords on all sites and its 100% i didn't log in into any Russian site with this one or any 1 , i never logged into a single Russan site. ;D

"It starts with an email send rom a site imitating the real site:"   -Never happened 100% , I never never log in to a site from a link only from bookmarks.


Fact is that the password for Istock wasn't strong and  had only 6 alphanumeric signs, oposite to my e-mail password which is very strong.


The thing  is that there was something wrong with my internet few days ago and until it was solved  I used free public unsecured network that my city offers in few spots and 1 is near my apartment , but I don't know if its possible for someone to take my passwords that way ?

Im still thinking....

« Reply #18 on: August 31, 2011, 11:32 »
0
A different way to think secure passwords, is to combine unlikely words. Like GreyFishFliesInPeru. A bit lengthy to type, but very easy to remember, og almost impossible to guess.

http://chrisandjanet.net/asparaguspee/?p=1601

« Reply #19 on: September 02, 2011, 18:54 »
0
Ok now its becoming more serious , i got an e-mail from Depositphotos that my e-mail has been changed , and I cannot sign in with old password.

Any advices  ?

My system doesnt have maleware and trojans scaned full system with all tools...

« Reply #20 on: September 02, 2011, 19:01 »
0
"1-954-990-0075 (10 AM - 8 PM ET) for English-speaking users"

Unfortunately it's almost 8pm Eastern and Monday is a holiday, but I would definitely write, call (perhaps you can leave a message). They should have a procedure when e-mail is changed where they send e-mail to both the old and the new addresses (many of the financial institutions I deal with do this) which says something to the effect of - if you didn't initiate this change, contact us xxx

The good news is that if they're closed until Tuesday morning, whoever has compromised your account probably can't get your money out in the meantime.

When you first had this problem with iStock, did you change all your account passwords and did whoever break in to your DepositPhotos a/c thus have your new passwords? If so, that means you have an ongoing problem with information on your system being compromised. If you still had your old password, then it could have been that one time breach. If you didn't change all your passwords before, I think now would be the time to get right on that...

« Reply #21 on: September 02, 2011, 19:16 »
0
"1-954-990-0075 (10 AM - 8 PM ET) for English-speaking users"

Unfortunately it's almost 8pm Eastern and Monday is a holiday, but I would definitely write, call (perhaps you can leave a message). They should have a procedure when e-mail is changed where they send e-mail to both the old and the new addresses (many of the financial institutions I deal with do this) which says something to the effect of - if you didn't initiate this change, contact us xxx

The good news is that if they're closed until Tuesday morning, whoever has compromised your account probably can't get your money out in the meantime.

When you first had this problem with iStock, did you change all your account passwords and did whoever break in to your DepositPhotos a/c thus have your new passwords? If so, that means you have an ongoing problem with information on your system being compromised. If you still had your old password, then it could have been that one time breach. If you didn't change all your passwords before, I think now would be the time to get right on that...

Thanks i sent them urgent mail , the thing is in few  changed my passwords except Deposit because i have only small number of images there and i missed it while i was changing all. It was the only site on next page of my little book with logins and i thought that the list ended on that page. It had very similar password  like istock before and those were only 2 sites with similar passwords.

« Reply #22 on: September 02, 2011, 19:33 »
0
That's truly scary. Do you keep your passwords in the browser? I believe this may be a risk.


 

Related Topics

  Subject / Started by Replies Last post
0 Replies
2524 Views
Last post December 17, 2007, 12:27
by Istock News
0 Replies
2718 Views
Last post December 21, 2007, 21:27
by Istock News
8 Replies
6605 Views
Last post March 12, 2010, 16:39
by lisafx
13 Replies
8965 Views
Last post January 04, 2011, 23:34
by lisafx
2 Replies
6724 Views
Last post June 01, 2011, 09:53
by ThomasAmby

Sponsors

Mega Bundle of 5,900+ Professional Lightroom Presets

Microstock Poll Results

Sponsors