New Password Required?

[Jim I]

Did any of you get an e-mail that stated a password reset was needed?

I did the reset, but then I could not get logged in.

I had to do a another password reset here to get back online to this site.

Kind of strange.....

But at least the pop-up ads have gone away!!!



C-5277

[RoRo]

Email requesting a password reset? Whenever I see one of those I instantly think it's a Phishing scam.

[Jim I]

That is a possibility.

Here is the e-mail received:


----- Original Message -----
From: "WordPress" <wordpress@gm-volt.com>
To: <>
Sent: Wednesday, June 13, 2012 11:44 AM
Subject: [GM-VOLT : Chevy Volt Electric Car Site] Emergency Password Reset


> ALERT: The admin of GM-VOLT : Chevy Volt Electric Car Site requires that you reset the password for the following account:
>
> http://gm-volt.com
>
> Username: Jim I
>
> You must reset your password before you can log back in. To reset your password, visit the following address:
>
> <http://gm-volt.com/wp-login.php?action=rp&key=xWongNpVZCzOSLOWKuUX&login =Jim%20I>
>
>
>

[RoRo]

Hmm...that link looks legit. LOL

[TeV]

Jim I:

You may have just given your password to someone with malicious intent; in your shoes I would assume your account has been taken over by someone else, unless and until you can confirm you still have control of it.

If it were me and I still had control of my account, I would immediately change my password to something completely different.

If you no longer control your account, let one of the site's moderators know ASAP. Since the malicious party presumably now has your password, I would also change the password if you use the same one on any other sites, especially banking/e-commerce sites (and for the love of God, don't post any of those details here!).

Edit: Also, if you use the same password for anything on your computer (ie. to log into your computer, or to change settings), change it IMMEDIATELY or the perp may be able to control your computer as well.

Hope I'm wrong, but every 'emergency password reset' email I've ever seen or heard of was definitely an attempt to steal the password and take control of someone else's account.

[DavidV]

You can usually tell if the link in an e-mail is valid or not by hovering over it and looking to see if the URL matches the text. The safest thing to do is to NEVER click on a link in an e-mail. If you think the e-mail is valid, go to the website by typing the URL into your browser, not by clicking on the link in the e-mail. That way you control which website you go to, rather than the person who sent the e-mail.

[ewiggins]

My view is that no legit website should send E-mail asking a user to changed a password. Kinda like financial institutions should never ask for any personal information view E-mail.

[mmcc]

I got the same email and changed my password but now I'm suspicious. I logged out of GM-Volt and logged back in using my old password and it worked so not sure what's going on. My new password did not work.

[Davem9586]

That should have given you the answer. You just gave someone your password. I would suggest you change it NOW on any site you use this password.

[mmcc]

That should have given you the answer. You just gave someone your password. I would suggest you change it NOW on any site you use this password.

It was a unique password that I don't use anywhere else so I should be ok. Has there been any official comment from the blog host yet about the email?