MicrostockGroup
Agency Based Discussion => Shutterstock.com => Topic started by: John W. on July 13, 2012, 16:37
-
Hi all,
Today I got this phishing email. I wonder how they get to know my email address which I use for Shutterstock. Anyone else had these email before? The links in the mail direct to shutterstockmail(dot)com
-----------------------------------------------
On July 11th and 12th, we detected unauthorized access to a small number of Shutterstock accounts, using what we believe is a list of login credentials obtained from another source. Your account with the username *** may have been accessed. Please note that no taxpayer information or identification documents were accessed.
To ensure the security of your data, we have reset your password and have put additional security measures in place. Please select a new password by visiting http://submit.shutterstock.com (http://submit.shutterstock.com) and click on "Forgot your password?" in the login process, and create a new password for your account. You may also click on the following link to do so: http://submit.shutterstock.com/forgot.mhtml (http://submit.shutterstock.com/forgot.mhtml)
We recommend using unique passwords for each of your online accounts and choosing strong passwords with a combination of numbers, letters and symbols.
We apologize for any inconvenience. If you have any questions, feel free to contact us by email:
[email protected].
Sincerely,
The Shutterstock Team
Shutterstock
This email was sent to ***.
© 2004-2012 All rights reserved - Shutterstock®
Shutterstock Images LLC | 60 Broad Street, 30th Floor | New York, NY 10004 | USA
We value your privacy. View our privacy policy.
-
I haven't gotten one but I wonder if it has anything to do with the captcha going back up.
-
I just got that e-mail too. Looks very legit (except for the re-direct on the e-mails). Suspicious in that they waited until after SS business hours on a Friday to send that out too. My first thought was that the return of Captcha had something to do with it too.
-
same here.
and here is the link in the shutterstock-forum:
http://submit.shutterstock.com/forum/viewtopic.php?t=123865 (http://submit.shutterstock.com/forum/viewtopic.php?t=123865)
But nothing new in the moment.
-
I clicked on the two links from the OP, and both take me Shutterstock and shows me logged in with my earnings visible including my homepage. How could a phishing scam have access to my homepage without me giving them any info?
-
I clicked on the two links from the OP, and both take me Shutterstock and shows me logged in with my earnings visible including my homepage. How could a phishing scam have access to my homepage without me giving them any info?
I think the cut and paste in this forum are picking up the legit link based on the context but when I hovered over the links in the phishing e-mail in the lower left of my screen I could see the re-direct to a secure https at shutterstockmail dot com
-
shutterstockmail.com is owned by Shutterstock. They use it for all links in their email campaigns. Based on the information presented in this thread so far, this is not a phishing attempt.
Whenever in doubt, manually type the website address into your browser rather than clicking any links in the email.
-
Anthony at Shutterstock just posted on their forum that this is legitimate. Only a small number of contributors were affected so only they were contacted by e-mail. If you didn't receive this notice then you should be fine. Although it's always a good idea to change your password(s) every few months or so.
-
Not SS, but I had quite a few reset password notices on Fotolia this morning.
-
Dear Contributors:
This email was sent earlier today to a small number of affected contributors. Please direct any questions to [email protected].
As always, we recommend that you be cautious when you receive any email of this type. Double-check URLs to make sure that you are on the Shutterstock.com site before performing any login, password change or reset actions. When in doubt, email Contributor Support directly and we will be happy to assist you.
We apologize for any inconvenience.
Sincerely,
Anthony Correia
Director, Content Operations
Shutterstock | Bigstock
-
Yep I got this too. Bit scary. But thanks to all posting in this forum (and the SS forum), it helps to put your mind at ease as to whether it was phishing or not.
Time to overhaul my passwords...
-
Hey, anyone using the same password on Yahoo that they use on SS? ???
http://money.cnn.com/2012/07/12/technology/yahoo-hack/index.htm (http://money.cnn.com/2012/07/12/technology/yahoo-hack/index.htm)
Anyone using the same account name and password on 25 bazillion Microstock sites, some which may be run by questionable people or without that blind accusation, employees of an agency stealing and selling account information? Don't use the same password on multiple MicroStock sites, or at least the ones that actually make money? Who cares if someone gets your CrapStock password, and the site nets you 3 downloads a year?