Author Topic: Shutterstock reset password phishing mail (Read 15970 times)

John W. · « **on:** July 13, 2012, 16:37 »

Hi all,

Today I got this phishing email. I wonder how they get to know my email address which I use for Shutterstock. Anyone else had these email before? The links in the mail direct to shutterstockmail(dot)com

-----------------------------------------------

On July 11th and 12th, we detected unauthorized access to a small number of Shutterstock accounts, using what we believe is a list of login credentials obtained from another source. Your account with the username *** may have been accessed. Please note that no taxpayer information or identification documents were accessed.

To ensure the security of your data, we have reset your password and have put additional security measures in place. Please select a new password by visiting http://submit.shutterstock.com and click on "Forgot your password?" in the login process, and create a new password for your account. You may also click on the following link to do so: http://submit.shutterstock.com/forgot.mhtml

We recommend using unique passwords for each of your online accounts and choosing strong passwords with a combination of numbers, letters and symbols.

We apologize for any inconvenience. If you have any questions, feel free to contact us by email:
[email protected].

Sincerely,
The Shutterstock Team

Shutterstock
This email was sent to ***.
© 2004-2012 All rights reserved - Shutterstock®

Shutterstock Images LLC | 60 Broad Street, 30th Floor | New York, NY 10004 | USA

We value your privacy. View our privacy policy.

cathyslife · « **Reply #1 on:** July 13, 2012, 16:39 »

I haven't gotten one but I wonder if it has anything to do with the captcha going back up.

klsbear · « **Reply #2 on:** July 13, 2012, 16:48 »

I just got that e-mail too. Looks very legit (except for the re-direct on the e-mails). Suspicious in that they waited until after SS business hours on a Friday to send that out too. My first thought was that the return of Captcha had something to do with it too.

redo · « **Reply #3 on:** July 13, 2012, 16:52 »

same here.
and here is the link in the shutterstock-forum:
http://submit.shutterstock.com/forum/viewtopic.php?t=123865
But nothing new in the moment.

rimglow · « **Reply #4 on:** July 13, 2012, 17:44 »

I clicked on the two links from the OP, and both take me Shutterstock and shows me logged in with my earnings visible including my homepage. How could a phishing scam have access to my homepage without me giving them any info?

klsbear · « **Reply #5 on:** July 13, 2012, 18:34 »

Quote from: rimglow on July 13, 2012, 17:44

I clicked on the two links from the OP, and both take me Shutterstock and shows me logged in with my earnings visible including my homepage. How could a phishing scam have access to my homepage without me giving them any info?

I think the cut and paste in this forum are picking up the legit link based on the context but when I hovered over the links in the phishing e-mail in the lower left of my screen I could see the re-direct to a secure https at shutterstockmail dot com

Lee Torrens · « **Reply #6 on:** July 13, 2012, 19:40 »

shutterstockmail.com is owned by Shutterstock. They use it for all links in their email campaigns. Based on the information presented in this thread so far, this is not a phishing attempt.

Whenever in doubt, manually type the website address into your browser rather than clicking any links in the email.

w7lwi · « **Reply #7 on:** July 13, 2012, 20:35 »

Anthony at Shutterstock just posted on their forum that this is legitimate. Only a small number of contributors were affected so only they were contacted by e-mail. If you didn't receive this notice then you should be fine. Although it's always a good idea to change your password(s) every few months or so.

Pixart · « **Reply #8 on:** July 13, 2012, 20:41 »

Not SS, but I had quite a few reset password notices on Fotolia this morning.

ruxpriencdiam · « **Reply #9 on:** July 13, 2012, 21:45 »

Quote

Dear Contributors:

This email was sent earlier today to a small number of affected contributors. Please direct any questions to [email protected].

As always, we recommend that you be cautious when you receive any email of this type. Double-check URLs to make sure that you are on the Shutterstock.com site before performing any login, password change or reset actions. When in doubt, email Contributor Support directly and we will be happy to assist you.
We apologize for any inconvenience.

Sincerely,

Anthony Correia
Director, Content Operations
Shutterstock | Bigstock

THP Creative · « **Reply #10 on:** July 14, 2012, 02:59 »

Yep I got this too. Bit scary. But thanks to all posting in this forum (and the SS forum), it helps to put your mind at ease as to whether it was phishing or not.

Time to overhaul my passwords...

RacePhoto · « **Reply #11 on:** July 16, 2012, 00:35 »

Hey, anyone using the same password on Yahoo that they use on SS?

http://money.cnn.com/2012/07/12/technology/yahoo-hack/index.htm

Anyone using the same account name and password on 25 bazillion Microstock sites, some which may be run by questionable people or without that blind accusation, employees of an agency stealing and selling account information? Don't use the same password on multiple MicroStock sites, or at least the ones that actually make money? Who cares if someone gets your CrapStock password, and the site nets you 3 downloads a year?

MicrostockGroup Sponsors

Author Topic: Shutterstock reset password phishing mail (Read 15970 times)

John W.

cathyslife

klsbear

redo

rimglow

klsbear

Lee Torrens

w7lwi

Pixart

ruxpriencdiam

THP Creative

RacePhoto

Related Topics

Sponsors

Microstock Poll Results

Sponsors