Major Security/Password Question!

[Harlee Fallen]

Hey everyone,

 

Basically i believe someone has tried to log into my second life name....i received and email at 08:55 with the following.

 

Harlee Fallen,
 
Click the link below to reset your password.
 
(link to reset password)
 
If clicking does not work, you can copy and paste the link into your Web browser. Once you have gone to the link, we will give instructions for resetting your password.
 
Linden Lab and the Second Life Team
 
 
(Your IP Address: an italian i.p address -i dont live in italy-)

I did not request my password to be reset and nor do i live in italy so i'm not sure as to how an italian I.P address showed up as 'my i.p' this is obviously extremely scary.... what is it i should do?

[Sylvia Tamalyn]

Don't do it....if you want to reset your password, do it from your Dashboard. This email is not from LL, it's someone trying to get you to hand over your password. 

[Harlee Fallen]

Omg i clicked the link though...and it took me to a page where it said my 'account' is on hold....but my account isnt on hold.....

[Sylvia Tamalyn]

Like I said, it's not from SL/LL....which is why it's giving you inaccurate info. Go to your Dashboard and on the left hand side, you'll be able to change your password under Account. 

[Amethyst Jetaime]

NEVER click on something like that you didn't request.  Change your password immediately! 

I would notify Linden Lab too.  You can forward that email to them and tell them what you posted here.  Send it to security@lindenlab.com

[Harlee Fallen]

its weird because it took me to the official second life website just the information on it was like strange i've changed my password now however this whole thing has made me paranoid.

 

https://secondlife.com/my/account/verify.php?r=ab0784e4461841d5b3df64f055cc95ea〈=en



thats the link that was given to me.

[Sassy Romano]

It's also possible that some entered the wrong name and tried to do a password reset.  You then get the email to change your password.

I've done that in the past, accidentally tried the wrong account name and hit the "reset password" thing and it sent an email to that person.  (other systems, not SL)

[Harlee Fallen]

Perhaps and that was my first theory but....

the link provided is very strange as it took me to a SL webpage however said my account was on hold...but it wasnt...just really strange...

 

and i have been getting trolled in world for the past month...scary stuff

[Harlee Fallen]

also the perosn did it twice...so...i dont know if it was an accident i do believe someone tried to get my info....

maybe just threw typing my name and thinking my account would be on hold...not sure...but there i.p address was given to linden labs so they'll investigate..

 

also come to the conclusion its not a fishing site just....someone tried to reset my password.

[Venus Petrov]

Phishers are adept at making a page look like an official website.  Never ever change your password unless you, yourself, have logged into your Dashboard page.

[wiked Anton]

i would say your right...................use a very difficult password, write it down. change it often

[Tiffy Vella]

Harlee....I suggest you log into your SL account asap, using the official link, not the one provided in the email, and reset your password. Then keep a very close eye on any credit cards associated with your account. The people here are right, and I bet you never were taken to the official site, only the phishing site which would look identical.

[Void Singer]

and rule number one, no matter how official the letter seems, even if it looks like it comes from a legit source NEVER just click on the link, ALWAYS go to the site address you know by typing it in (or using your own saved bookmark).