PUBLIC SERVICE UPDATE - BEWARE OF daniele.frontuto and mstewart9739

[SheriffBooth]

Everyone - We have identified a Paypal address connected to "daniele.frontuto@gmail.com" as a common thread among more than one hacked account.

 

We are also concerned that a Paypal address connected to "mstewart9739@gmail.com" may be problematic.  This is not confirmed but seems likely.

 

DO NOT SEND MONEY TO OR TRANSACT BUSINESS WITH THESE PAYPAL ACCOUNTS

Edited October 10, 2024 by SheriffBooth

[Ben Berube]

2 minutes ago, SheriffBooth said:

Everyone - We have identified a Paypal address connected to "daniele.frontuto@gmail.com" as a common thread among more than one hacked account.

 

DO NOT SEND MONEY TO OR TRANSACT BUSINESS WITH THIS PAYPAL ACCOUNT

shady!!

[SheriffBooth]

The modus operandi is that the hacked account will appear like a normal member, but when payment is requested it is to the daniele.frontuto PayPal address.

 

We do not know if this is the only PayPal account being used, but felt it important to alert you to this one that we know is being used.  We have also sent notice to PayPal itself regarding this account.

[JMB3]

But Daniele Frontuto has such a compelling story!

 

 

[SheriffBooth]

Updated with an additional Paypal account that may be problematic.

[gfogelgolf]

PM… sent I got got by Daniel…. Love this site been here for more than a decade I think and first time! Still love this site!

[lasallen]

2 hours ago, JMB3 said:

But Daniele Frontuto has such a compelling story!

 

 

Same reply I got, who knows if paypal will give my money back.

[gfogelgolf]

Pretty confident in Paypal!!! Think everything will work out! And we have proof from the Mods here that this guy is a scam....

[JMB3]

36 minutes ago, lasallen said:

Same reply I got, who knows if paypal will give my money back.

Man, I sure hope so.  Wife was already questioning my “need” for a new driver.  🤣

[zwhitworth]

50 minutes ago, gfogelgolf said:

PM… sent I got got by Daniel…. Love this site been here for more than a decade I think and first time! Still love this site!

#metoo 😞

@JMB3 did you get him/her down to $390 for that Mezz broom with LA Golf shaft?!?  That was going to be the deal of the year 🙂

[JMB3]

33 minutes ago, zwhitworth said:

#metoo 😞

@JMB3 did you get him/her down to $390 for that Mezz broom with LA Golf shaft?!?  That was going to be the deal of the year 🙂

Haha—GT2 10* Driver head.  My gut screamed “too good to be true.”  But my hoeness didn’t want to listen.  

[lasallen]

1 minute ago, JMB3 said:

Haha—GT2 10* Driver head.  My gut screamed “too good to be true.”  But my hoeness didn’t want to listen.  

Same for me!!!!!!

[gfogelgolf]

That was my driver I bought!!!!!! Think PayPal will see all of us filing and figure it out

[JMB3]

21 minutes ago, lasallen said:

Same for me!!!!!!

 

19 minutes ago, gfogelgolf said:

That was my driver I bought!!!!!! Think PayPal will see all of us filing and figure it out

Wowww!

[zwhitworth]

Surely a half dozen or so reports on a seller will be enough for them to make the right call. They used to be very buyer friendly but I think that has shifted a bit. 

[third-times-a-charm]

@SheriffBooth why dont you guys have the 'IT team' scramble and salt all user account password with a DB query that havent logged in or been active in some arbitrary number like 90 days? Seems the rash of hacked accounts has been going on for over a year, now. If they are being hacked from dark web lists or old/default passwords a mass reset would solve most of the issue and if the user wants to actually login they can just use the reset PW link. Granted their signup email isnt comprimised.

[Ben Berube]

10 hours ago, third-times-a-charm said:

@SheriffBooth why dont you guys have the 'IT team' scramble and salt all user account password with a DB query that havent logged in or been active in some arbitrary number like 90 days? Seems the rash of hacked accounts has been going on for over a year, now. If they are being hacked from dark web lists or old/default passwords a mass reset would solve most of the issue and if the user wants to actually login they can just use the reset PW link. Granted their signup email isnt compromised.

Awesome idea. Love your thinking.

[SheriffBooth]

10 hours ago, third-times-a-charm said:

@SheriffBooth why dont you guys have the 'IT team' scramble and salt all user account password with a DB query that havent logged in or been active in some arbitrary number like 90 days? Seems the rash of hacked accounts has been going on for over a year, now. If they are being hacked from dark web lists or old/default passwords a mass reset would solve most of the issue and if the user wants to actually login they can just use the reset PW link. Granted their signup email isnt comprimised.

 

Not my area of expertise but will certainly send this up the chain.

[SheriffBooth]

Also, a number of Members who have been impacted by this issue (thankfully it's not very many) have PM'ed me directly.  That's no problem at all, but if you are only just discovering a problem please use the Report button on the account that you transacted business with.  That way it will get in front of the entire Mod team.  Thanks!

[goheels11]

Looks like @bbhockey19 was also hacked. I just purchased a set of Srixon irons that were fraudulently listed under his account. @SheriffBooth

[SheriffBooth]

2 minutes ago, goheels11 said:

Looks like @bbhockey19 was also hacked. I just purchased a set of Srixon irons that were fraudulently listed under his account. @SheriffBooth

 

Yes - he was one of the first accounts we discovered and that irons listing is now in the BST Dispute forum.  @bbhockey19 is back in control of his account now.  If you did business with the daniele.fruntuto email address you need to be in contact with Paypal right away.

[SheriffBooth]

Also - if you head over to the BST Dispute Forum and you will see the hacked listings that we've caught so far and the usernames linked to those listings.

[Gxgolfer]

We have been looking at and monitoring the situation and will take appropriate actions. 
 

Every action has a cause and effect. We still have not detected any breaches and some responses from those compromises were not from people who have logged outside of 90 days.
 

So resetting everyone’s password may or may not address the issue. An easier solution would be set the classifieds to approve all new post. More mods maybe needed though. We may do a password reset for a group who has not logged in for over 90 days for various reasons. 

 

The community has been vigilant and following best practices for personal security is the best defense. 

[Obscuri4l]

20 hours ago, JMB3 said:

Haha—GT2 10* Driver head.  My gut screamed “too good to be true.”  But my hoeness didn’t want to listen.  

Darn hoeness!

[goheels11]

9 hours ago, SheriffBooth said:

 

Yes - he was one of the first accounts we discovered and that irons listing is now in the BST Dispute forum.  @bbhockey19 is back in control of his account now.  If you did business with the daniele.fruntuto email address you need to be in contact with Paypal right away.

The person that interacted with me wanted me to PayPal via friends and family and I declined. I was not completely confident, but once he accepted PayPal GS, I did the transaction.  Here is the PayPal he offered…sl94paypala@gmail.com   Simone Locatelli. Filed with PP already. 

[LPSISCO]

Oh boy. I paid sl94@paypala on Monday for iron heads and haven’t heard a thing since…and the member’s account now says Account Hold. 

 

Time for a Paypal dispute I guess. 

[JMB3]

1 hour ago, goheels11 said:

The person that interacted with me wanted me to PayPal via friends and family and I declined. I was not completely confident, but once he accepted PayPal GS, I did the transaction.  Here is the PayPal he offered…sl94paypala@gmail.com   Simone Locatelli. Filed with PP already. 

Another hacker using Italian pseudonyms?  Gotta be the same one who got me.

[LPSISCO]

I’ve never filed a claim with PP before. I opened a Dispute, and I guess I have to wait until the 14th to escalate to a Claim. 

 

If anyone has experience with this, please let me know this is correct. 

 

By the way, the member account I purchased from is pizdiz10. 

[rx1232]

Just a tip - there may not have been any breaches here but there have been plenty out there on very popular places. The bad guys generally take those lists, which are publicly available if you know where to look, and use that to log in. 

this likely explains why some of the hacked accounts are not dormant users. 
 

THP requires a written note of name and date in the photos of your listing. I used to think that was a bit overkill but I guess it would help put a lot of friction to fraudulent posts. That or make everyone use 2FA. 

Edited October 12, 2024 by rx1232

[nsxguy]

On 10/10/2024 at 10:13 PM, third-times-a-charm said:

@SheriffBooth why dont you guys have the 'IT team' scramble and salt all user account password with a DB query that havent logged in or been active in some arbitrary number like 90 days? Seems the rash of hacked accounts has been going on for over a year, now. If they are being hacked from dark web lists or old/default passwords a mass reset would solve most of the issue and if the user wants to actually login they can just use the reset PW link. Granted their signup email isnt comprimised.

 

If someone hacked an account here, besides the password, wouldn't changing the email addy, be the next obvious thing to do ? 

 

So if the board forced all passwords to be reset, the email notice (if any), or the "new" email, would be the one used to verify/reset one's password, no ?

 

So the hacker would get the email, or, when forced by WRX to reset the password, would be using the new email addy - which would be HIS.

 

I mean there's no 2FA, or phone numbers, challenge questions, or other such info the hacker would be forced to change/know, is there ? And if there were, wouldn't the hacker be smart enough to know to change those too ?