Posted Tue Mar 3, 2009 8:22PM
On 2009-03-03 20:10:11, kkthompson wrote:
(Edited on 2009-03-03 20:30:14 by kkthompson)
This afternoon a phishing attack was conducted in the forums and through sitemail. This attack created a fake istockphoto.com login screen, prompted the user for a username & password, saved them to a malicious server, then redirected the user back to the iStockphoto main page.
Some Q&A:
Is my credit card information safe?
iStockphoto does not store any credit card information, so there is no financial information to breach.
Is your site secure?
Our site is secure. We detected this attempted breach within minutes and implemented our security protocol: because we weren't sure how far-reaching it was, we took the site down to eliminate further exposure.
What should I do now?
Step 1: Please reset your iStock Password
Step 2: As a precaution, please make sure you reset all your online passwords on other sites if they happen to be the same as the one you use on iStockphoto.
Some Q&A:
Is my credit card information safe?
iStockphoto does not store any credit card information, so there is no financial information to breach.
Is your site secure?
Our site is secure. We detected this attempted breach within minutes and implemented our security protocol: because we weren't sure how far-reaching it was, we took the site down to eliminate further exposure.
What should I do now?
Step 1: Please reset your iStock Password
Step 2: As a precaution, please make sure you reset all your online passwords on other sites if they happen to be the same as the one you use on iStockphoto.
(Edited on 2009-03-03 20:30:14 by kkthompson)

