EVGA user passwords compromised!

[igor_kavinski]

I'm sorry to those that got scammed

I wanted to apologize to those that got scammed from my account 87dtna recently being hacked. I'm working with the admins to recover my account, the scammer changed my email so I couldn't do a password reset so an admin banned the account until he could talk to the site owner or an admin with...

www.overclock.net

Change those passwords!!!

 

[DAPUNISHER]

Thanks bro, done.

 

[Stg-Flame]

Done. Thanks for the heads up in the other threads.

 

[balloonshark]

Thanks for the heads up. Where is the option to turn on 2FA? I don't see it anywhere.

 

[MrTeal]

They keep saying EVGA forums, but that's just your EVGA account is it not? I thought they used the same login for the forums as your main EVGA account.

 

[igor_kavinski]

Thanks for the heads up. Where is the option to turn on 2FA? I don't see it anywhere.

 

[balloonshark]

View attachment 122610

Thanks but I'm not seeing the same thing as you. I'm on EVGA.com and their site is dark colored. If I click My EVGA and go under profile I don't have a 2FA option. I also don't see any options at https://forums.evga.com/. I'm using firefox so maybe that is the issue.

 

[igor_kavinski]

Thanks but I'm not seeing the same thing as you. I'm on EVGA.com and their site is dark colored. If I click My EVGA and go under profile I don't have a 2FA option. I also don't see any options at https://forums.evga.com/. I'm using firefox so maybe that is the issue.

Oh. I thought you were asking about AT 2FA. I don't have an account on EVGA.

 

[Steltek]

Thanks for the heads up, password changed.

 

[mindless1]

Does EVGA disallow gmail addresses on accounts?

I don't recall having a 2nd EVGA account, but it won't let me change my old email address to a gmail address, and reset password for the gmail address, didn't result in receiving a PW reset email to that gmail address.

I just changed it to a non-gmail addy instead.

 

[Steltek]

Does EVGA disallow gmail addresses on accounts?

I don't recall having a 2nd EVGA account, but it won't let me change my old email address to a gmail address, and reset password for the gmail address, didn't result in receiving a PW reset email to that gmail address.

I just changed it to a non-gmail addy instead.

I have a hotmail account, so I can't imagine why it wouldn't accept gmail. Though, I actually logged into my account and changed it from there rather than using the password reset.

Then again, my eVGA account is also ancient and I have never tried to change the email address associated with it.

 

[Stg-Flame]

Does EVGA disallow gmail addresses on accounts?

I don't recall having a 2nd EVGA account, but it won't let me change my old email address to a gmail address, and reset password for the gmail address, didn't result in receiving a PW reset email to that gmail address.

I just changed it to a non-gmail addy instead.

I use a Gmail account for my EVGA account and I had no issues changing my password.

 

[igor_kavinski]

Some douche at overclock.net with the hacked passwords is still at it: https://www.overclock.net/threads/msi-nvidia-geforce-rtx-5090-gaming-trio-oc-32gb-gddr7-new.1815959/

 

[Hail The Brain Slug]

It would seem they think these passwords are from the old evga forum hack in 2021? If you already handled that back when it happened, you should be fine.

 

[mindless1]

I don't remember the 2021 hack, probably didn't change PW then because I still had an old email address on the account, that I lost years before that, looks like possibly an account made to get the extended warranty on a GeForce 9600 GSO bought in 2008... Those were the days, a -6 series card new for $35 after rebate!

Yeah that account has 0 forum posts.

 

[DAPUNISHER]

It would seem they think these passwords are from the old evga forum hack in 2021? If you already handled that back when it happened, you should be fine.

"Should be" isn't good enough for me when it comes to security. It took me less than a minute to change it.

 

[tcsenter]

Looks like EVGA Forums went read-only. Can't login there is no login box or dialogue anywhere.