Revenuenetwork hack?

[Sherlock]

An update has been made to your Revenue Network profile. If this was not done by you or by someone on your behalf please contact Customer Service.

Sincerely,

Revenue Network
affiliatesupport@revenuenetwork.com

Got this email. seems to be genuine. I can access my affiliate software but not the cashier. I am investigating...

[Sherlock]

I was able to reset password somehow through secondary email. The primary email did not get request to change the password.

There is no damage, they paid out commissions 3 days ago. 2 days ago I asked for payout and they paid out yday. I sent messages and emails to all contacts I have. Something is not right. Hopefully just my own dumbness.

But it is good that they have the system with separated cashier and with PIN in cashier.

[Malikbhai]

I was able to reset password somehow through secondary email. The primary email did not get request to change the password.

There is no damage, they paid out commissions 3 days ago. 2 days ago I asked for payout and they paid out yday. I sent messages and emails to all contacts I have. Something is not right. Hopefully just my own dumbness.

But it is good that they have the system with separated cashier and with PIN in cashier.

Staff in on this? I would assume your $100k payouts can entice anyone to play dirty...

[Sherlock]

My other accounts are ok, so it was likely just one time incident. Still I am not sure what happened. Hopefully someone will respond within a month.
Someone clearly changed a password but without access to my emails (likely). So some inside job? Could be some update as well. Weird.

[Malikbhai]

My other accounts are ok, so it was likely just one time incident. Still I am not sure what happened. Hopefully someone will respond within a month.
Someone clearly changed a password but without access to my emails (likely). So some inside job? Could be some update as well. Weird.

Or some overmart staff member reset your password since you keep changing locations or use VPN or something.

[allfreechips]

i lost my allfreechips domain from an email hack back in 2009 ish.. they got my password, and were able to request info, new passwords ext and when they got the response on my email they deleted the emails. I never saw any trace of all this until my domain was under a guy in Vietnam's control. Be sure you have extra security on your email PW....

[Sherlock]

Can be something with emails. Not sure if it works by you as well, but to the affiliate stats I am logging through some number of account and some password.
To the cashier work(ed) apparently as login 2 different emails. One yahoo and one from my domain (the domain is not connected to any websites, I am using a separate domain and it is not possible to be hacked, because of the guy who administers it). The email from my domain is also listed as a primary contact in their affiliate website.

Maybe they just discarded the yahoo email as login option during some update and made the login only through the primary email. Since the yahoo does not work as login anymore and it does not work for resetting password as well. My own email works.

Tl;Dr I think they somehow made update, where the email from affiliate part must match the login email from cashier part.

[Sherlock]

It is quite concerning that I am still not having a response. There is like 24 hour gap between asking for withdrawal and payout. Not my case now, but still..

[tufty]

I can access my affiliate software but not the cashier.

I can never access cashier from UK, but can access affiliate software. I use VPN for cashier. They do have geo-blocking in place for some locations, despite them wrongly denying this. I know this is a side issue in relation to a potential hack, but might explain your problem getting to cashier.

[allfreechips]

Also ad block will cause this...

[Sherlock]

That is not the issue. Simply the password stopped working for the email, for which was always working.

The issues with adblock/geoblock do not allow you even to load the page.

This is really some security/update/hack issue. I got the weird email and password stopped working, And for 24 hours nobody cares. Btw. the problem with loading the cashier page was always resolved for me by anonymous mode.

[allfreechips]

Not that this is good news but i was able to log in and make a request

[Sherlock]

As I wrote above, I also can log in with my other RN accounts. I can also log in with my primary account, but not with the email that was always used as a login name. That email worked as login name since the inception of cashier. I can also login with my RN number.

[Sherlock]

I got reply now. It seems someone/something requested the email change (from one my email to my other email). Why it happened I hope I will get response for. Because it was not me who asked for that.

[universal4]

Interesting, I know you probably thought of this, but might wanna consider a password reset on the email addy's, just to be a bit safer, unless they know the request was made from an email that was not in your account, and if so no way should the change have gone forward without asking you for verification.

Rick
Universal4

[allfreechips]

I can send an email from anyone in the world... billgates@microsoft.com ext.. the fact that they allowed this to change the email with verification is terrible, or someone actually has access to your email to verify,.,.

[Sherlock]

They say now that on 4th May was requested a change of emails associated with my account. It could have been my ex-employee trying to do something. But frankly it is possible that it could have been me. I am quite busy and I do not recall what I did a month ago.

I am asking if they can look for IP addresses because they are logging them. But I see just last 10 accesses.

[Sherlock]

It makes no sense that some hacker hacks to my yahoo account just to change the email to my another email. Without leaving trace in the email.

Either it was some update of RN, where they simply merged my emails into one automatically;
or I am total idiot and I do not know what I am doing (but I am not deleting emails ever even with Alzheimer)
or it was my rogue employee trying god knows what (I fired 3 people recently; 2 of them had access to the RN affiliate part; I did some changes in the beginning of May with all affiliate accounts, like changing my passwords, but I do not remember changing email of cashier... maybe an update of password at accounts.revenuenetwork.com changed somehow email at revenuenetwork.com to the email that is on file of accounts.revenuenetwork.com. THis sounds super complicated, but this is IT world.. But the change happened not on 4th May, but few days ago, when I got the email)

[Sherlock]

So the hypothesis is confirmed.

It was my IP that asked for the change of login name to cashier.

The only problem is that I did not ask for it. I asked for changing a password of affiliate account.

But the change apparently triggered sync of all data including the login name to cashier.

[Theaccountant]

Can be something with emails. Not sure if it works by you as well, but to the affiliate stats I am logging through some number of account and some password.
To the cashier work(ed) apparently as login 2 different emails. One yahoo and one from my domain (the domain is not connected to any websites, I am using a separate domain and it is not possible to be hacked, because of the guy who administers it). The email from my domain is also listed as a primary contact in their affiliate website.

Maybe they just discarded the yahoo email as login option during some update and made the login only through the primary email. Since the yahoo does not work as login anymore and it does not work for resetting password as well. My own email works.

Tl;Dr I think they somehow made update, where the email from affiliate part must match the login email from cashier part.

Someone hacked my old email vinculated to Revenue Network so i disabled it, i am trying to contact them for put a new email in my account so i can recover my password. I have the username, personal information and other things for identity proof.

Do you think they answer in his email? ---> affiliatesupport...

Thank you