** !! Affiliates and Affiliate Managers - BE AWARE !! **

[AE-Martyn]

I recently busted some punk who tried to change payment details on an affiliates account towards the end of last month.

Please check your accounts or at least be on your guard as this stuff does happen. Usually they will change it on the last day of the month to avoid detection but this was done a few days earlier.

The details I have for this guy are...

Neteller
Huynh Truong Hoang Oanh
452224455713
bookie.master@yahoo.com

He/She also goes by the name of Naotake Izumi and appears to be from Vietnam.

I emailed this person to "confirm" the account changes and they emailed back, so they are super cheeky...

"Hi Martyn Beacon,

Yes, Please update give me!

Thank you,

Best Regards,

XXXXX"

Keep your passwords secure, change them regularly and don't use the same password for all your logins. It sounds obvious but there are some real scumbags out there.

Thats all for now.

[Jamie - RateMyCasino]

He/She also goes by the name of Naotake Izumi and appears to be from Vietnam.

Someone from that email approached me roughly two weeks ago with the same e-mail address asking for link exchange. Dam i deleted his e-mail, i will see what i can do to see if my hosting can pull the email back as it had his website link as well.

Did they bother updating the site info Martyn? If they did can you post his/her URL

It may be wise to lodge a ticket with Neteller as well informing they are using their neteller account for fraudulent purposes.

[Chips]

Well done Martyn! Nice catch, it is comforting to know you are watching over us. Now, plan a trip to Nam and chop the pricks fingers off.

[CCJ]

Thanks for letting us all know!

[FictionNet]

Thanks for the heads up. How did they access the affiliate's account? Guess the username and password?

[wagerjunction]

Thanks for the tip Martyn.

Why can't these try and earn a honest living instead of trying to rip out decent hard working folks. You are absolutely right Chips.. and it's not only the fingers we should plan on chopping off!!!

[AE-Martyn]

Did they bother updating the site info Martyn? If they did can you post his/her URL

It may be wise to lodge a ticket with Neteller as well informing they are using their neteller account for fraudulent purposes.

No, they did not provide any site info. We have already reported this to Neteller.

Thanks for the heads up. How did they access the affiliate's account? Guess the username and password?

They used the affiliates login details. From the audit trail, there have been a lot of failed login attempts around the 26th of May until they finally seemed to get the details correct. So they either had an idea of what the password could be, they somehow guessed it (unlikely) or some kind of virus/key logger has been used.

However, I don't have the answer to that.

I checked out affiliate database and we dont have an IP registered that matches the IP that tried to access, it could be dynamic? I'll try get it and post it, maybe someone else has them signed up to their program?

[mojo]

This would be my account that was comprimsed.

They even wrote Martyn back and signed my name..

Hi Martyn Beacon,

Yes, Please update give me!

Thank you,

Best Regards,

Paula

As far as getting into my account, I'm not sure. One thing I can say was my pw was six numbers. Of course they tell you to use both letters and numbers, so I have been changing all my pw's. I also noticed an old email that they must have gotten notification from Martyn with and promptly deleted that email address.

Of course I'm concerned that they now have my personal info. I'll be changing a lot of things to protect myself. With all the payment detail changes we are experiencing right now, these things can happen. It may be best to change your pw more often than usual. AM's can be diligent like Martyn was with follow up mails and keep an eye on your email for program detail auto mails.

With all the stuff going on right now, some scumbag stealing from me is the last thing I need and would probably put me over the edge.

BUT Martyn donned his superhero cape and used his superhero death ray and sent them off to The Land of No Fingers.

Thanks Martyn.

Stay safe everyone!

[FictionNet]

Glad it ended up okay and a thumbs up to Martyn for being so professional. It still worries me though - I'd hate this to happen to me.

[SlotsAff]

I've seen this thing happen quite a bit - and on 2 occasions it was someone from Vietnam.

Audit Trails in an affiliate programme are vital for AMs to monitor - it can also help an affiliate being paid on time as they may enter a new payment method's details wrongly (it happens a lot).

Back to the issue - this is why some programmes take 2-3 days to complete 'month end' - this is a part of what is being done

[rak]

Well done Martyn! Nice catch, it is comforting to know you are watching over us. Now, plan a trip to Nam and chop the pricks fingers off.

If Marty is going to Nam, I'm going to. We'd be like the 2 tallest people in the country - most successful basketballs over there. I'd probably get my belly rubbed a lot for some Buddha wishing.

[AE-Martyn]

If Marty is going to Nam, I'm going to. We'd be like the 2 tallest people in the country - most successful basketballs over there. I'd probably get my belly rubbed a lot for some Buddha wishing.

My old boss has a bar there, it might be worth a trip!

[Smoking]

Glad all is working out !!

keep in mind use of strong passwords :
Strong Password Guidelines

A strong password:
has at least 15 characters;
has uppercase letters;
has lowercase letters;
has numbers;
has symbols, such as ` ! " ? $ ? % ^ & * ( ) _ - + = { [ } ] : ; @ ' ~ # | \ < , > . ? /
is not like your previous passwords;
is not your name;
is not your login;
is not your friend's name;
is not your family member's name;
is not a dictionary word;
is not a common name.

hope this helps some1

[AE-Martyn]

... and don't use 'password' as your password!

[mojo]

They also have to get the user id.

Someone told me once that if you X out instead of clicking the logout link, you are leaving it open and are suseptable.

Is that true?

[rak]

They also have to get the user id.

Someone told me once that if you X out instead of clicking the logout link, you are leaving it open and are suseptable.

Is that true?

If its on a computer that someone else can access. Like a public computer. If I close my browser down, and when I open it back up.. I am logged into GPWA right away without having to enter in my user and pass.

Logout if you want to keep your accounts secure.

[universal4]

Way to go Marty for the catch.

x'ing out isn't the most secure way to leave a secure page, but it should time out within 20 minutes since that is the default session variable.

But if you are on a public terminal it is imperative to log oput first, and an overall good practice anyway.

Smoking listed some great tips for passwords...here is one that goes along with what he said and can help you decide on a password.

Let's say the password at the bank is banking (very weak and could be cracked in an hour depending on the program)

But you could easily change it to
B@nking1 or B@nk1ng

It covers all the criteria for being strong, at least 1 capital letter, a high ascii character and a number.

Rick
Universal4

[xecutable]

So this guy hacked 10% of the affiliates on this forum? I mean is it me or this looks more like database leakage than bruteforce password attacks.....