Retro Members Targets of Possible Phishing Scam

Gone Fishing Sonic Retro PoundStuff ForumAlleged Password Stealing on Side Forum

There apparently was one notable after effect from last week’s forum outage at Sonic Retro–one that is being scrutinized by its members.

A few members have made inquiries to the site’s administrators–with a few more writing in to TSSZ News–about a letter they received announcing their eligibility for membership at another area called #stuff, or Pound Stuff.  The community has no relation to Sonic fandom–it merely shares some members between the two entities.  But the letter, below, was apparently mailed to most of Sonic Retro’s members in the past 24 hours:

Title:
OMG!! You’ve got an account on poundstuff.net !!! ( Pound Stuff Message Board )

Message:
Hello!  I’m proud to announce that because you had an account on Sonic Retro,  you also have an account on the #stuff forum!  You can find us at http://www.poundstuff.net/ and login with your existing Sonic Retro login.

We’d like you to take a look around and make a few posts, and familiarize yourself with #stuff.  We are a non-sonic related community devoted to nothing in particular.  Please give it a try.

You can also find our IRC channel at irc.poundstuff.net, #stuff.

If you do not login to poundstuff.net within the next week, your account will automatically be purged (possibly sooner… omg!)

Thank you!
#Stuff Administration,
Tweaker, x64, HarroSIN

P.S.  HarroSIN fell down the stairs and his shoes fell off.

Notable in the letter is the apparent alliance of two strange bedfellows–Retro forum head Tweaker, and the ex-Retro forum banned for illicitly accessing the forum, x64.  TSSZ News told you yesterday about how Tweaker gave x64 a password to access the forum, unaware that it would be used for harm.

As it turns out, Sonic Retro’s Wiki has an entry on #stuff, and it states that the side project was founded in December of last year.  In its current state, #stuff hosts a forum and an IRC channel for chats.  The wiki entry also claims that both x64 and Tweaker claim a co-ownership stake on both the website and chat areas.

But one Retro forum alleges that it may also be hosting something more illicit–a script to log and steal passwords, a practice commonly known as phishing.

Shortly after TSSZ News received the original letter concerning #stuff, another one penned by GerbilSoft was sent in, alleging that Retro forumers who fall for the letter are being duped:

If you received an email from poundstuff.net inviting you to join their forums because you are a Sonic Retro member, do *not* go there. x64 has set up a
script to log all passwords entered in the login page.  Just a heads up to prevent any sort of shenanigans from happening.

TSSZ News cannot verify the authenticity of that particular tidbit of information right now.  However, Tweaker did confirm in a short interview with TSSZ News’s Mike Taylor that not only is it spam at best–as it turns out, a part of last week’s attack of Sonic Retro included x64 allegedly copied users’ personal data over to #stuff:

Mike Taylor: Is this spam?
Tweaker:  They yanked our user database and made another forum with it.  It’s not -spam-, persay [sic], but it may as well be.

Tweaker has since informed inquiring Retro members that data has been compromised, but that the matter is out of their hands.  Other members are warning one another that the potential exists for passwords to be stolen using the database at #stuff, especially if users adhere to the E-Mail’s directions.

Your best bet–an E-Mail such as the one quoted above should be shifted to the trash bin promptly.

Share it Now: