phishing

[GabrielleVanDerMalle]

what is the current danger?

[Ansariel Hiller]

http://www.firestormviewer.org/phishing-scams-on-the-rise-again/

[Rolig Loon]

The danger is two-fold.  First, there's the danger of losing access to your account, having your assets stolen, and having your identity compromised.  The link that Ansariel gave you warns about that.  Read also http://wiki.secondlife.com/wiki/Linden_Lab_Official:Scams .  The other danger is that you won't do anything about it once you have been phished.  It's important to take immediate steps to protect yourself.

Your account may have been compromised if:

• You can't access your account.
• You suddenly notice a reduced available balance on the payment source you have on file.

If this happens, contact us immediately!

Here's what to do:

1. Go to the Second LIfe Help page and log in if you can. If you can't access your account, use the Forgot your login information? link on the right to recover your username and reset your password. Then log in.
2. On the Second LIfe Help page page, click the Contact Support link on the right.
3. On the next page, click Submit a a Support Case form.
4. Under What type of problem are you having?, select Account Issue. A second dropdown appears.
5. Under Account Issue, select I believe my account has been compromised.
6. Fill in the rest of the fields as directed.
7. Click Submit.
8. Check your email for your case number.
9. Call our fraud number: 800-860-6990.

Once you do this, Linden Lab will place your account on hold and investigate the relevant transactions. This may take a few days. Once we have concluded the investigation, we'll send you an email explaining our conclusion and the action we will take. Note that all transactions involving Linden dollars are subject to Linden Lab's Terms of Service.

Tip: Even if you are able to log into your account, we recommend that you change your password immediately to something secure and unique.  Changing your password regularly is one good way to protect the safety of your account.  For information on how to change your password, see the How to change your password section of this article.

[Lindal Kidd]

Phishing is definitely on the rise in SL.  While most people are cautious about clicking links they get in an email, they are less cautious about clicking links that they get in chat or IM in Second Life.

ANY link may lead to a phishing site.  LL's sign in pages are not complex, and easily duplicated.  You can be sent to a page that looks, on first glance, like a Second Life web page sign in...but it's not, and if you enter your password and user name, your account can be stolen by a phisher.  He can log in as you, change your password, steal your $L, and commit Terms of Service violations that will get you banned from SL.

I am not saying you should never click a link someone gives you in world.  But be aware of the dangers, and the tell-tale signs of phishing.  Links from strangers are the most suspicious.  Links that lead to sites that have a different domain name are not to be trusted.  Web pages that contain spelling errors or appear different in other ways from offical LL sites are highly suspicious.

There are places you can go on the web to educate yourself in the signs of phishing.  Here is one:

http://blog.opendns.com/2011/11/16/can-you-spot-a-phishing-site-take-our-quiz-to-find-out/

A search on "spot phishing website" will find many others.