Important: 2FA and Password Recommendations

[Grant]

Tonight a scammer managed to access a users account and post fake classified adverts to try and scam people via PayPal transfer. It looks like the scammer was going through member accounts and trying to access them through credential stuffing which is where people try login details from known data breaches on other websites in the hopes that people have used the same credentials elsewhere.

To stop this type of attack we strongly urge you to ensure you are using a unique and secure password for all of your online accounts including SGL and that you consider turning on 2FA (two factor authentication) in your user proifile. This adds a secondary layer of security to your account.

Please also be on the look out for any emails saying your account has been locked because of too many login attempts or your account email address being changed. These are all signs of either somebody attempting to access your account or, having accessed your account changing the email address on the account over to theirs.

Unfortunately, this type of attack is all to common and there are many data breaches out there from the past such as Dropbox and Linked In - you can see if your email address has ever been involved in a data breach here: https://haveibeenpwned.com.

We have no evidence to suggest SGL itself has ever been breached but we should not be complacent, having unique, complex passwords is a must for every site you use and switching on 2fa can make it even more secure.

One other note of caution - if a deal looks too good to be true, it probably is and never, ever use PayPal friends and family as this will give you no insurance whatsoever against scammers. If you are ever suspicious of a classified advert or have any concerns about the security of your account then please contact one of the mod or admin team and we would be happy to help.