Curse

Gli · Mar 03, 2009, 03:05 PM // 15:05

Quote:

Originally Posted by LithiumPicnic

Sure there is, as I'm sure you all know...

Login to the xunlai house, and then "view source". Email addy, ACCOUNT NAME and password are stored in plain text.

How impossible is it for a rogue trojan like app doing the rounds collecting info like that?

Whoa! The screenshot isn't working for me, but I just checked this on my PC at work. Logged into my Xunlai account, logged out immediately and less than a minute later I managed to access that source through the temporary internet files folder. Xunlai account e-mail address, Xunlai account password AND GW accountname: all in there, all unencrypted. Scary stuff, especially if you use the same password for both.

faraaz · Mar 03, 2009, 03:30 PM // 15:30

I'm glad I use a firewall, with very paranoid monitoring of outgoing connections from my PC. Zonealarm ftw.

nos two · Mar 03, 2009, 03:49 PM // 15:49

you know how your parents told you to never open email from people you dont know this is one of those cases, they, as in the scammer, could of put a keylogger/trojan in your email to get your passwords, real life information like what bank you use and various other things, even your what brand of shoes you look for because everything is stored in your computer. This is an obvious failed attempt at getting your GW stuff but hey you still opened the email. If only "they" were smart enough

Melon · Mar 03, 2009, 05:21 PM // 17:21

Scammers and their shitty english, pure classic.

BenjZee · Mar 03, 2009, 07:13 PM // 19:13

Just checked the Xunlai thing thats quite weird , it tells you the information directly...good job i use different passwords etc on xunlai account that is totally different