Discussion Forum: Thread 319390

 Author: good_old_bricks View Messages Posted By good_old_bricks
 Posted: Apr 4, 2022 11:41
 Subject: Achtung SCAM unterwegs.
 Viewed: 528 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

good_old_bricks (4072)

Location:  Germany, Rheinland-Pfalz
Member Since Contact Type Status
Oct 7, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Good Old Bricks
Hallo Zusammen,

eine eindringliche Warnung an alle Bricklinker:

Am Samstag/Sonntag ging eine Scammail raus dessen Verfasser meinen Namen und
meinen Onlinestore "Good Old Bricks" missbraucht. Die Betrüger haben eine URL
"goodoldbricks.de" registriert und verschicken unter "info@goodoldbricks.de"
eine vermeintliche Verkaufsliste von unerhört günstigen "Exklusiv Legosets" die
sie sogar mit einem kopierten Logo von uns versehen haben.

Wir weisen ausdrücklich darauf hin, dass die Emailadresse
info@goodoldbricks.de und die Domain goodoldbricks.de
nicht zu uns gehören und wir keinerlei Werbe Emails verschicken!

Solltet ihr solche Mails erhalten haben, dann handelt es sich hierbei um professionellen
Scam / Internetbetrug!

Wir distanzieren uns ausdrücklich von den entsprechenden Emails.

Geht bitte nicht auf etwaige Angebote ein und überweist auf gar keinen Fall
Geld für diese "günstigen Legosets". Good Old Bricks verkauft Lego exklusiv
über Bricklink und betreibt keine Mailwerbung.


Solltet Ihr eine entsprechende Werbe E-Mail unter meinem Namen erhalten haben,
leitet mir die gesamte E-Mailkorrespondenz bitte an folgende Adresse weiter.

scam@good-old-bricks.com


Rechtliche Schritte werden eingeleitet. Meine Daten sind alle öffentlich verfügbar,
aber woher die Scammer die Emailadressen der Bricklinker haben (und bisher haben
sich bezüglich des Scams nur Bricklinker bei mir gemeldet) entzieht sich meiner
Kenntnis. Es waren bisher auch keine Kunden von mir dabei. Bei mir ist also offenbar
nichts undicht....

Sorry an alle Kunden die heute Ihr Lego von mir haben wollten - aber der Arbeitstag
ging bisher voll für diese Sch**** drauf. Es rennen so viele ***** rum...

Ich rede mir aus reinem Selbstschutz trotzdem ein: Die Id**** sind in der Minderheit
und wir sind einfach die Mehrheit (ab einem gewissen Machtlvl ist die Mindereit
natürlich trotzdem unerträglich)!

Viele Grüße und Spaß beim Werkeln,
Simon
 Author: Abels_Bricks View Messages Posted By Abels_Bricks
 Posted: Apr 4, 2022 12:32
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 129 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Abels_Bricks (1268)

Location:  United Kingdom, Scotland
Member Since Contact Type Status
Oct 2, 2017 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Abel's Bricks
In LANG Deutsch, good_old_bricks writes:
  Hallo Zusammen,

eine eindringliche Warnung an alle Bricklinker:

Am Samstag/Sonntag ging eine Scammail raus dessen Verfasser meinen Namen und
meinen Onlinestore "Good Old Bricks" missbraucht. Die Betrüger haben eine URL
"goodoldbricks.de" registriert und verschicken unter "info@goodoldbricks.de"
eine vermeintliche Verkaufsliste von unerhört günstigen "Exklusiv Legosets" die
sie sogar mit einem kopierten Logo von uns versehen haben.

Wir weisen ausdrücklich darauf hin, dass die Emailadresse
info@goodoldbricks.de und die Domain goodoldbricks.de
nicht zu uns gehören und wir keinerlei Werbe Emails verschicken!

Solltet ihr solche Mails erhalten haben, dann handelt es sich hierbei um professionellen
Scam / Internetbetrug!

Wir distanzieren uns ausdrücklich von den entsprechenden Emails.

Geht bitte nicht auf etwaige Angebote ein und überweist auf gar keinen Fall
Geld für diese "günstigen Legosets". Good Old Bricks verkauft Lego exklusiv
über Bricklink und betreibt keine Mailwerbung.


Solltet Ihr eine entsprechende Werbe E-Mail unter meinem Namen erhalten haben,
leitet mir die gesamte E-Mailkorrespondenz bitte an folgende Adresse weiter.

scam@good-old-bricks.com


Rechtliche Schritte werden eingeleitet. Meine Daten sind alle öffentlich verfügbar,
aber woher die Scammer die Emailadressen der Bricklinker haben (und bisher haben
sich bezüglich des Scams nur Bricklinker bei mir gemeldet) entzieht sich meiner
Kenntnis. Es waren bisher auch keine Kunden von mir dabei. Bei mir ist also offenbar
nichts undicht....

Sorry an alle Kunden die heute Ihr Lego von mir haben wollten - aber der Arbeitstag
ging bisher voll für diese Sch**** drauf. Es rennen so viele ***** rum...

Ich rede mir aus reinem Selbstschutz trotzdem ein: Die Id**** sind in der Minderheit
und wir sind einfach die Mehrheit (ab einem gewissen Machtlvl ist die Mindereit
natürlich trotzdem unerträglich)!

Viele Grüße und Spaß beim Werkeln,
Simon

Thats really terrible, I hope you can get this all sorted and thansk for letting
everyone know about this scam.

David
 Author: BobBongo View Messages Posted By BobBongo
 Posted: Apr 4, 2022 14:12
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 126 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

BobBongo (1252)

Location:  Germany, Nordrhein-Westfalen
Member Since Contact Type Status
Jun 17, 2010 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: Doktor Brick
Hey ho,

Oliver Semp / Excalibur Store

hat es auch erwischt

Grüße

Klaus
 Author: Nubs_Select View Messages Posted By Nubs_Select
 Posted: Apr 4, 2022 14:15
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 142 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Nubs_Select (3732)

Location:  Canada, Ontario
Member Since Contact Type Status
Mar 15, 2016 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Nub's Select
---Google translated to English for easier reading---
"Hello everyone,

A strong warning to all Bricklinkers:

On Saturday/Sunday a scam mail went out whose author gave my name and
misused my online store "Good Old Bricks". The scammers have a URL
"goodoldbricks.de" registered and sent to "info@goodoldbricks.de"
a supposed sales list of outrageously cheap "exclusive Lego sets" the
even provided them with a copied logo from us.

We expressly point out that the email address
info@goodoldbricks.de and the domain goodoldbricks.de
do not belong to us and we do not send any advertising emails!

If you have received such emails, then these are professional ones
Scam / internet fraud!

We expressly distance ourselves from the corresponding emails.

Please do not respond to any offers and do not transfer under any circumstances
money for these "cheap lego sets". Good Old Bricks sells Lego exclusively
via Bricklink and does not operate any mail advertising.

If you have received a corresponding advertising e-mail under my name,
Please forward all e-mail correspondence to the following address.

scam@good-old-bricks.com


Legal steps are initiated. My data is all publicly available,
but where the scammers got the email addresses of the Bricklinkers from (and
have so far
only Bricklinker contacted me about the scam) eludes me
knowledge. So far there have not been any customers of mine. So it's obvious
to me
nothing leaking....

Sorry to all customers who wanted their Lego from me today - but the working
day
so far it was full for this pig. There are so many ***** running around...

Nevertheless, out of pure self-protection, I tell myself: The Id**** are in the
minority
and we are simply the majority (from a certain power level the minority is
of course still unbearable)!

Best regards and happy working,
Simon"
 Author: legoman77 View Messages Posted By legoman77
 Posted: Apr 4, 2022 17:33
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 100 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

legoman77 (3628)

Location:  USA, Texas
Member Since Contact Type Status Collage
Jan 22, 2003 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
View Collage Pic
Store: 77's Bricks & Sets
In LANG Deutsch, Nubs_Select writes:
  ---Google translated to English for easier reading---
"Hello everyone,

A strong warning to all Bricklinkers:

On Saturday/Sunday a scam mail went out whose author gave my name and
misused my online store "Good Old Bricks". The scammers have a URL
"goodoldbricks.de" registered and sent to "info@goodoldbricks.de"
a supposed sales list of outrageously cheap "exclusive Lego sets" the
even provided them with a copied logo from us.

We expressly point out that the email address
info@goodoldbricks.de and the domain goodoldbricks.de
do not belong to us and we do not send any advertising emails!

If you have received such emails, then these are professional ones
Scam / internet fraud!

We expressly distance ourselves from the corresponding emails.

Please do not respond to any offers and do not transfer under any circumstances
money for these "cheap lego sets". Good Old Bricks sells Lego exclusively
via Bricklink and does not operate any mail advertising.

If you have received a corresponding advertising e-mail under my name,
Please forward all e-mail correspondence to the following address.

scam@good-old-bricks.com


Legal steps are initiated. My data is all publicly available,
but where the scammers got the email addresses of the Bricklinkers from (and
have so far
only Bricklinker contacted me about the scam) eludes me
knowledge. So far there have not been any customers of mine. So it's obvious
to me
nothing leaking....

Sorry to all customers who wanted their Lego from me today - but the working
day
so far it was full for this pig. There are so many ***** running around...

Nevertheless, out of pure self-protection, I tell myself: The Id**** are in the
minority
and we are simply the majority (from a certain power level the minority is
of course still unbearable)!

Best regards and happy working,
Simon"

You should have translated it to Canadian. Then our northern suburbs would know
what it is all aboot.

John P
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 4, 2022 17:38
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 97 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  You should have translated it to Canadian.

Yes but no.

Talking about Poutine would be a delicate political subject.

 Author: Nubs_Select View Messages Posted By Nubs_Select
 Posted: Apr 4, 2022 17:52
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 92 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Nubs_Select (3732)

Location:  Canada, Ontario
Member Since Contact Type Status
Mar 15, 2016 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Nub's Select
 Author: Nubs_Select View Messages Posted By Nubs_Select
 Posted: Apr 4, 2022 17:52
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 81 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Nubs_Select (3732)

Location:  Canada, Ontario
Member Since Contact Type Status
Mar 15, 2016 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Nub's Select
 Author: buildingfactory View Messages Posted By buildingfactory
 Posted: Apr 4, 2022 14:54
 Subject: (Cancelled)
 Viewed: 125 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

buildingfactory (2314)

Location:  Germany, Nordrhein-Westfalen
Member Since Contact Type Status
Jan 18, 2009 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Building Factory
(Cancelled)
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 10:28
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 132 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:


And BTW, their web site is ALSO suspicious (or very young?): no Terms, no About,
no Policies, nothing.
 


 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 5, 2022 15:32
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 101 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:

Dang, it’s an epidemy: I just got an e-mail from someone trying to pass as Brick24.

What’s troubling me is how they got my e-mail address


  And BTW, their web site is ALSO suspicious (or very young?): no Terms, no About,
no Policies, nothing.

I didn’t get that far….
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 15:35
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 78 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:

Dang, it’s an epidemy: I just got an e-mail from someone trying to pass as Brick24.

What’s troubling me is how they got my e-mail address

Yes me too - and it's published nowhere.

Some buyer/seller must have been hacked/virused/trojaned
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 15:41
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 97 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:

Dang, it’s an epidemy: I just got an e-mail from someone trying to pass as Brick24.

What’s troubling me is how they got my e-mail address

Ohhh just received it.
Same format as the previous.

Screen copy below.

I'm sooo deceived of this Ansgar Riedel
 
 Author: leopard37 View Messages Posted By leopard37
 Posted: Apr 5, 2022 15:48
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 71 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

leopard37 (4519)

Location:  Canada, Alberta
Member Since Contact Type Status
Jul 15, 2015 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Leopard37
In LANG Deutsch, 1001bricks writes:
  In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:

Dang, it’s an epidemy: I just got an e-mail from someone trying to pass as Brick24.

What’s troubling me is how they got my e-mail address

Ohhh just received it.
Same format as the previous.

Screen copy below.

I'm sooo deceived of this Ansgar Riedel


I received this email as well. Has anyone informed BL of this? Is this part of
that data breach that occurred?

Tyson.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 15:52
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 70 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  I received this email as well. Has anyone informed BL of this? Is this part of
that data breach that occurred?

It doesn't need a "data breach" on BL.

Just one seller/buyer in Germany (probably) infected that "gave" his address
book.

I've regularly SPAM from old sellers 10 years ago or such that are closed
for years.
It's not directly their fault; they've been infected and now I receive
e-mails from "them".

Sure it's not very professional
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 5, 2022 15:59
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 69 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, leopard37 writes:
  […]
I received this email as well. Has anyone informed BL of this?

I pinged someone on the Studio team (which I have a direct access to ) to warn
the Marketplace team.


   Is this part of
that data breach that occurred?

Tyson.

I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 16:02
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 65 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).

Not you, but any seller who sold something to you including in 2000 can have
breached his address book.
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 5, 2022 16:07
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 74 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, 1001bricks writes:
  
  I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).

Not you, but any seller who sold something to you including in 2000 can have
breached his address book.

Yeah, but the question was about the breach from a few weeks ago.
The partner that got breached never had my address, so it’s not them.

But yeah, it can be any BL seller.
 Author: faro View Messages Posted By faro
 Posted: Apr 5, 2022 18:09
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 77 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

faro (2846)

Location:  Germany, Schleswig-Holstein
Member Since Contact Type Status
Aug 15, 2006 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: Faro's Store
In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  
  I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).

Not you, but any seller who sold something to you including in 2000 can have
breached his address book.

Yeah, but the question was about the breach from a few weeks ago.
The partner that got breached never had my address, so it’s not them.

But yeah, it can be any BL seller.

You can find their names and addresses in the store, no need for a data breach
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 18:13
 Subject: (Cancelled)
 Viewed: 56 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
(Cancelled)
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 18:14
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 74 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
In LANG Deutsch, faro writes:
  In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  
  I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).

Not you, but any seller who sold something to you including in 2000 can have
breached his address book.

Yeah, but the question was about the breach from a few weeks ago.
The partner that got breached never had my address, so it’s not them.

But yeah, it can be any BL seller.

You can find their names and addresses in the store, no need for a data breach

My (and SylvainLS) email address is nowhere on BL, and at least mine is nowhere
on the
web.

So it comes from an adress book of either a buyer or a seller.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 18:19
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 67 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
In LANG Deutsch, 1001bricks writes:
  In LANG Deutsch, faro writes:
  In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  
  I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).

Not you, but any seller who sold something to you including in 2000 can have
breached his address book.

Yeah, but the question was about the breach from a few weeks ago.
The partner that got breached never had my address, so it’s not them.

But yeah, it can be any BL seller.

You can find their names and addresses in the store, no need for a data breach

My (and SylvainLS) email address is nowhere on BL, and at least mine is nowhere
on the
web.

So it comes from an adress book of either a buyer or a seller.


PS, here's a good place to test if your email address can be for sale somewhere:
https://haveibeenpwned.com/


But again, pwned or not, this kind of scam concerning LEGO Sets sold B2B means
the sender knows exactly his target: sellers (only) on BrickLink.

In short, it shouldn't come from a generic pwned addresses that doesn't
give you any info on who's behind it.
 Author: faro View Messages Posted By faro
 Posted: Apr 5, 2022 18:26
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 64 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

faro (2846)

Location:  Germany, Schleswig-Holstein
Member Since Contact Type Status
Aug 15, 2006 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: Faro's Store
In LANG Deutsch, 1001bricks writes:
  In LANG Deutsch, 1001bricks writes:
  In LANG Deutsch, faro writes:
  In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  
  I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).

Not you, but any seller who sold something to you including in 2000 can have
breached his address book.

Yeah, but the question was about the breach from a few weeks ago.
The partner that got breached never had my address, so it’s not them.

But yeah, it can be any BL seller.

You can find their names and addresses in the store, no need for a data breach

My (and SylvainLS) email address is nowhere on BL, and at least mine is nowhere
on the
web.

So it comes from an adress book of either a buyer or a seller.


PS, here's a good place to test if your email address can be for sale somewhere:
https://haveibeenpwned.com/


But again, pwned or not, this kind of scam concerning LEGO Sets sold B2B means
the sender knows exactly his target: sellers (only) on BrickLink.

In short, it shouldn't come from a generic pwned addresses that doesn't
give you any info on who's behind it.

That maybe right but some store have imprints on their site showing the address.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 5, 2022 18:27
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 81 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  
  PS, here's a good place to test if your email address can be for sale somewhere:
https://haveibeenpwned.com/


But again, pwned or not, this kind of scam concerning LEGO Sets sold B2B means
the sender knows exactly his target: sellers (only) on BrickLink.

In short, it shouldn't come from a generic pwned addresses that doesn't
give you any info on who's behind it.

That maybe right but some store have imprints on their site showing the address.

Yes - but neither SylvainLS or me, and I received it to our shop address, unknown
from the outside (apart if you've been a buyer or a seller).
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 11, 2022 05:38
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 50 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, 1001bricks writes:
  Yes - but neither SylvainLS or me, and I received it to our shop address, unknown
from the outside (apart if you've been a buyer or a seller).

Yeah, same for me - scam email received to my BL store email address which isn't
listed on my store page here, or anywhere else public, as far as I know.

I think that means it must have come from a store I've bought from, a member
I've sold to or sent a BL message to (the email form of a message includes
the sender's email address), or a source inside BL.

But as you and the other Sylvain have pointed out this looks to be targeting
BL sellers so I assume it's not an email address book leak, it's specific
addresses being harvested.
 Author: hoover View Messages Posted By hoover
 Posted: Apr 7, 2022 00:32
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 88 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

hoover (95)

Location:  USA, Texas
Member Since Contact Type Status
Sep 9, 2003 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: Sets 'n' Stuff
In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  
  I made only one order this year and never from out of EU (so none of my orders
got through the “breached” partner).

Not you, but any seller who sold something to you including in 2000 can have
breached his address book.

Yeah, but the question was about the breach from a few weeks ago.
The partner that got breached never had my address, so it’s not them.

But yeah, it can be any BL seller.

Not really *any* BL seller; the list is probably quite short, actually. I got
the brick24 spams, yet my feedback is only 95, my store has been closed for a
few years, and my last transaction was in 2014.
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 5, 2022 15:52
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 66 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, 1001bricks writes:
  In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:

Dang, it’s an epidemy: I just got an e-mail from someone trying to pass as Brick24.

What’s troubling me is how they got my e-mail address

Ohhh just received it.
Same format as the previous.

Screen copy below.

I'm sooo deceived of this Ansgar Riedel


Yeah, his lists are ugly

I sent them a message… in case someone falls for it and gets back to them, angry.
 Author: Stellar View Messages Posted By Stellar
 Posted: Apr 5, 2022 15:56
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 60 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Stellar (3484)

Location:  Spain, Comunidad Valenciana
Member Since Contact Type Status
Sep 24, 2015 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Stellar Bricks
BrickLink Discussions Moderator (?)
In LANG Deutsch, 1001bricks writes:
  In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:

Dang, it’s an epidemy: I just got an e-mail from someone trying to pass as Brick24.

What’s troubling me is how they got my e-mail address

Ohhh just received it.
Same format as the previous.

Screen copy below.

I'm sooo deceived of this Ansgar Riedel


Just got the same too...
 Author: faro View Messages Posted By faro
 Posted: Apr 5, 2022 18:07
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 75 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

faro (2846)

Location:  Germany, Schleswig-Holstein
Member Since Contact Type Status
Aug 15, 2006 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: Faro's Store
In LANG Deutsch, 1001bricks writes:
  In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:

Dang, it’s an epidemy: I just got an e-mail from someone trying to pass as Brick24.

What’s troubling me is how they got my e-mail address

Ohhh just received it.
Same format as the previous.

Screen copy below.

I'm sooo deceived of this Ansgar Riedel


I have informed Ansgar. I also received such a mail.
 Author: greenman View Messages Posted By greenman
 Posted: Apr 5, 2022 15:48
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 72 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

greenman (21950)

Location:  Netherlands, Gelderland
Member Since Contact Type Status Collage
Aug 24, 2000 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
View Collage Pic
Store: SystemBricks
In LANG Deutsch, 1001bricks writes:
  You're not alone apparently?

I just received an offer to buy cheap Sets from a web shop online but it's
a scam - they post it on their site:


And BTW, their web site is ALSO suspicious (or very young?): no Terms, no About,
no Policies, nothing.

Same mail over here, a few minutes ago.
Looks reliable, but it's not.

Klaas
 Author: Admin_Russell View Messages Posted By Admin_Russell
 Posted: Apr 5, 2022 19:12
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 191 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Admin_Russell

Location:  USA, California
Member Since Contact Type Status
May 9, 2017 Contact Member Admin
Buying Privileges - OKSelling Privileges - OK
BrickLink Administrator
In LANG Deutsch, good_old_bricks writes:
  Hallo Zusammen,

eine eindringliche Warnung an alle Bricklinker:


Hello everybody,

We are aware of this issue and are conducting an investigation. Thank you for
the continued reports.
 Author: RecycledBrick View Messages Posted By RecycledBrick
 Posted: Apr 6, 2022 11:59
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 124 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

RecycledBrick (8937)

Location:  USA, Washington
Member Since Contact Type Status
May 27, 2002 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: Recycled Brick
I just got this message as well.
 Author: Admin_Russell View Messages Posted By Admin_Russell
 Posted: Apr 6, 2022 14:33
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 196 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Admin_Russell

Location:  USA, California
Member Since Contact Type Status
May 9, 2017 Contact Member Admin
Buying Privileges - OKSelling Privileges - OK
BrickLink Administrator
In LANG Deutsch, Admin_Russell writes:
  In LANG Deutsch, good_old_bricks writes:
  Hallo Zusammen,

eine eindringliche Warnung an alle Bricklinker:


Hello everybody,

We are aware of this issue and are conducting an investigation. Thank you for
the continued reports.

We have looked into this and have determined it to be a scam. Please do not engage
with these emails. The information in the emails (including the email addresses
they were sent to) did not come from BrickLink.
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 11, 2022 05:30
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 66 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, Admin_Russell writes:
  We have looked into this and have determined it to be a scam. Please do not engage
with these emails. The information in the emails (including the email addresses
they were sent to) did not come from BrickLink.

Are you sure about that last part?

I've also had one this morning purporting to be from SMYK (as another member
has) but it was sent to an email address that's dedicated to Bricklink usage.
The only possible sources for this are stores I've bought from, members I've
sold to or messaged, or Bricklink itself.

It's possible a single member/store is behind this, but that would imply
that all of us have at some point dealt with the same member. That's also
possible, but starting to stretch things a little. It's really no less likely
that BL has suffered a data leak in some form.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 11, 2022 11:24
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 49 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  It's really no less likely that BL has suffered a data leak in some form.

No no - probably not.

I actually received spam for years of an old shop that has been personnaly compromised
(his computer of his e-mail address).
The scam bot sends "from him" or "from all his address book" to everyone.
It's really a basic task for this kind of spamming tool...

So yes, it's probably originating a previous buyer or seller of 1 (or
more) members who've been compromised (like an old 2010 e-mail address...)

Sylvain
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 11, 2022 12:00
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 44 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, 1001bricks writes:
  I actually received spam for years of an old shop that has been personnaly compromised
(his computer of his e-mail address).
The scam bot sends "from him" or "from all his address book" to everyone.
It's really a basic task for this kind of spamming tool...

Yeah, we've all had those in the past, but these appear to be emails targeted
at Lego sellers (somewhat mistakenly in my case!), not ones trying to sell fake
Raybans or pills to enhance your performance That definitely isn't a job
for an addressbook harvesting bot, they don't make that kind of connection.
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 11, 2022 12:49
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 51 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, Llewyn writes:
  In LANG Deutsch, 1001bricks writes:
  I actually received spam for years of an old shop that has been personnaly compromised
(his computer of his e-mail address).
The scam bot sends "from him" or "from all his address book" to everyone.
It's really a basic task for this kind of spamming tool...

Yeah, we've all had those in the past, but these appear to be emails targeted
at Lego sellers (somewhat mistakenly in my case!), not ones trying to sell fake
Raybans or pills to enhance your performance That definitely isn't a job
for an addressbook harvesting bot, they don't make that kind of connection.

They got the usernames and addresses… and then they checked if we had seller
status.  Not that difficult to do.
 Author: qwertyboy View Messages Posted By qwertyboy
 Posted: Apr 11, 2022 13:44
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 42 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

qwertyboy (7847)

Location:  Canada, Alberta
Member Since Contact Type Status
Apr 9, 2013 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Maple Bricks
In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, Llewyn writes:
  In LANG Deutsch, 1001bricks writes:
  I actually received spam for years of an old shop that has been personnaly compromised
(his computer of his e-mail address).
The scam bot sends "from him" or "from all his address book" to everyone.
It's really a basic task for this kind of spamming tool...

Yeah, we've all had those in the past, but these appear to be emails targeted
at Lego sellers (somewhat mistakenly in my case!), not ones trying to sell fake
Raybans or pills to enhance your performance That definitely isn't a job
for an addressbook harvesting bot, they don't make that kind of connection.

They got the usernames and addresses… and then they checked if we had seller
status.  Not that difficult to do.

I don't see why it would be a seller that got their address book compromised.
Would it not make way more sense that it was a buyer? For most buyers (the ones
that don't have a shop) pretty much all BL-related email addresses would
be from sellers. No need to check anything.

Unless I missed something in this long chain...

Niek.
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 11, 2022 13:51
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 40 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, qwertyboy writes:
  […]
I don't see why it would be a seller that got their address book compromised.
Would it not make way more sense that it was a buyer? For most buyers (the ones
that don't have a shop) pretty much all BL-related email addresses would
be from sellers. No need to check anything.

Unless I missed something in this long chain...

Well, I’m not a seller (never had buyers, never will).  And I got the e-mail.


  Niek.
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 11, 2022 14:01
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 37 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, qwertyboy writes:
  […]
I don't see why it would be a seller that got their address book compromised.
Would it not make way more sense that it was a buyer? For most buyers (the ones
that don't have a shop) pretty much all BL-related email addresses would
be from sellers. No need to check anything.

Unless I missed something in this long chain...

Well, I’m not a seller (never had buyers, never will).  And I got the e-mail.

And it’s not me who got compromised because I didn’t buy from most of the people
in this thread who said they received the e-mail


  
  Niek.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 11, 2022 14:35
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 44 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  
  Well, I’m not a seller (never had buyers, never will).  And I got the e-mail.

And it’s not me who got compromised because I didn’t buy from most of the people
in this thread who said they received the e-mail

NOW WE HAVE A PROOF! YOU ARE THE SCAMMER!!!
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 11, 2022 15:11
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 47 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, SylvainLS writes:
  They got the usernames and addresses… and then they checked if we had seller
status.  Not that difficult to do.

My point is that a traditional addressbook scavenger isn't going to be looking
for Bricklink accounts of any type in the first place. They're just looking
for any valid email addresses that can be used for spam or phishing purposes.

This is targeted at BL users, and you're not going to do that by deploying
malware and hoping you get a victim who's a very active BL user. BL's
big in the Lego world but it's no Amazon.

Tangentially I do get occasional spam emails to my Paypal email address, but
these are very much the traditional fake Rolex and Viagra spam you generally
get from someone's addressbook being scavenged. I don't get Paypal
phishing emails to it, because those bots aren't sophisticated enough to
recognise it as a Paypal user email. (I really wish Paypal would separate
admin email addresses from transaction addresses.)
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 11, 2022 15:51
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 42 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, Llewyn writes:
  In LANG Deutsch, SylvainLS writes:
  They got the usernames and addresses… and then they checked if we had seller
status.  Not that difficult to do.

My point is that a traditional addressbook scavenger isn't going to be looking
for Bricklink accounts of any type in the first place. They're just looking
for any valid email addresses that can be used for spam or phishing purposes.

This is targeted at BL users, and you're not going to do that by deploying
malware and hoping you get a victim who's a very active BL user. BL's
big in the Lego world but it's no Amazon.

Yes, all that’s established, BL sellers are the target, it’s not a prince in
distress blindly asking for help.

And either they got the addresses first and realized they could make a more targeted
scam, or they got the idea first and found the addresses after.
But that doesn’t explain how they got the addresses.

There’s two ways I see how they could get them: from a BL user (intentional or
not) or from BL (intentional or not).  (Hmm, okay, that would make four ways
)

Our point is that the first way (from a user) is rather easy.  And my point when
I answered you was that because BL sellers are targetted in a LEGO scam doesn’t
rule out the hypothesis of the source of addresses being a BL user (intentional
or not): once you have the addresses and the “idea” to scam BL users, whichever
came first, if you don’t already know which addresses are sellers’, you can still
learn it quite easily.

Another argument for a user being the source for the addresses is that it seems
pretty few people got the e-mails, relatively to the number it could be if they
got all the addresses from BL.
Or are they limiting themselves because too many e-mails sent would make them
easier to spot as scam?  Seems to me we spotted them easily
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 11, 2022 17:11
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 51 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, SylvainLS writes:
  And my point when
I answered you was that because BL sellers are targetted in a LEGO scam doesn’t
rule out the hypothesis of the source of addresses being a BL user (intentional
or not): once you have the addresses and the “idea” to scam BL users, whichever
came first, if you don’t already know which addresses are sellers’, you can still
learn it quite easily.

Absolutely. I haven't claimed at any point in this thread that it must have
come from BL or that it could not have come from a user, or even that it was
more likely to have come direct from BL. I merely pointed out that it hadn't
necessarily come from a user, and that it was as likely to have come from
either source. I then objected to Sylvain's insistence that it must have
been an addressbook leak, as I don't think that's the most likely cause
whatever the source. I think you'd lost sight of that in your urge to correct
me.

I have my own theory on how this might have been done, and it doesn't involve
any compromise on BL's part. However as someone who's part of the critical
incident response team for data breaches in our enterprise, I'm surprised
to see a BL admin stating so confidently that it's not come from them so
early in the incident response.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 11, 2022 18:30
 Subject: (Cancelled)
 Viewed: 28 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
(Cancelled)
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 11, 2022 18:34
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 30 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  I have my own theory on how this might have been done, and it doesn't involve
any compromise on BL's part. However as someone who's part of the critical
incident response team for data breaches in our enterprise, I'm surprised
to see a BL admin stating so confidently that it's not come from them so
early in the incident response.

Sure but frankly - I'd had compromised BL in any way, I could do far more
profit or damages than in simply sending fake e-mails with rare sets at half
the price (yes, that was appealing).

See here what a "fun" hack can do:
https://www.bricklink.com/message.asp?ID=1333886

Sylvain
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 11, 2022 19:01
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 41 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, Llewyn writes:
  […]
Absolutely. I haven't claimed at any point in this thread that it must have
come from BL or that it could not have come from a user, or even that it was
more likely to have come direct from BL. I merely pointed out that it hadn't
necessarily come from a user, and that it was as likely to have come from
either source. I then objected to Sylvain's insistence that it must have
been an addressbook leak, as I don't think that's the most likely cause
whatever the source. I think you'd lost sight of that in your urge to correct
me.

There was no urge in my answer and I was not “correcting” you, at least not in
the sense of “you’re wrong!  I’ll educate you!”
I was just adding information that I thought you might not have.

It’s how discussions work for me.  It’s not a game that’s to be won.  It’s not
one person says A, another says B, and one of them “wins” or they fight and repeat
the same things over and over.  It’s one person says A, another one doesn’t agree,
and says why, and the first agrees or explains what they meant by A or why they
said A, etc.  They might not agree in the end but they resolve the misunderstandings,
the missing assumptions….
Sure, it often starts as short “A! No B!” and not long “A because…  No, B because…”
but we can’t start each post with a rewriting of Euclides’s Elements to be sure
everyone is on the same page

So, anyway, you had the info.  You explained your point.  And it’s a bit different
from what I thought it was (I thought you used a litotes and put the BL-hypothesis
above the member-hypothesis) but that doesn’t change much: I still think member
is more likely but I never ruled out other hypotheses, it just seems the simplest
to me.


  I have my own theory on how this might have been done, and it doesn't involve
any compromise on BL's part. However as someone who's part of the critical
incident response team for data breaches in our enterprise, I'm surprised
to see a BL admin stating so confidently that it's not come from them so
early in the incident response.

I’d have liked BL to ask us (the ones who already publicly said they received
at least one e-mail, preferrably as a call for all users, through the thread,
not though a general message) for the e-mails¹.  Or at least make a list of us. 
Then make a quick cross-ref in the DB to know if we had sellers in common.  Then
reach to/check these sellers if possible.
Maybe things have been done… but all we have is Russell’s short messages.


¹ Well, I forwarded my copy when I contacted the admins but that’s only one.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 11, 2022 22:35
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 55 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  I’d have liked BL to ask us (the ones who already publicly said they received
at least one e-mail, preferrably as a call for all users, through the thread,
not though a general message) for the e-mails¹.  Or at least make a list of us. 
Then make a quick cross-ref in the DB to know if we had sellers in common.  Then
reach to/check these sellers if possible.

I sent my 2 ones to Russell.

Here the most interesting ones are (for once, ha ha) the ones with fewer transactions,
like you, Sylvain.

We could compare and point the common seller, very propably closed for some time.

But then?
Let's say it's "Martin Bricks from DK" (invented) closed in 2014, who
then have opened a Bakery in Vienna and don't even remember his previous
email address, not talking about the password

I'm not sure it could help
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 12, 2022 04:58
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 34 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, 1001bricks writes:
  […]
Here the most interesting ones are (for once, ha ha) the ones with fewer transactions,
like you, Sylvain.

At last, my buying habits may be useful


  We could compare and point the common seller, very propably closed for some time.

But then?
Let's say it's "Martin Bricks from DK" (invented) closed in 2014, who
then have opened a Bakery in Vienna and don't even remember his previous
email address, not talking about the password

I'm not sure it could help

Then we would know.  Knowledge, closure.  No more uncertainty, no more
doubt.  (Who?  Why me?  Do they have other info on me? …)
 Author: Stellar View Messages Posted By Stellar
 Posted: Apr 12, 2022 05:20
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 36 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Stellar (3484)

Location:  Spain, Comunidad Valenciana
Member Since Contact Type Status
Sep 24, 2015 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Stellar Bricks
BrickLink Discussions Moderator (?)
In LANG Deutsch, SylvainLS writes:
  In LANG Deutsch, 1001bricks writes:
  […]
Here the most interesting ones are (for once, ha ha) the ones with fewer transactions,
like you, Sylvain.

At last, my buying habits may be useful


I too forwarded the emails I got.

BTW not only sellers that people bought from, it is possible too that sellers
places orders in other stores too like many, so that widens the case.
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 12, 2022 12:13
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 34 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, SylvainLS writes:
  There was no urge in my answer and I was not “correcting” you, at least not in
the sense of “you’re wrong!  I’ll educate you!”
I was just adding information that I thought you might not have.

Fair enough, it came across that way given the starting point of my discussion
with Sylvain, but I do appreciate that the BL forum doesn't make it easy
to keep track of which discussion is which within a thread. Consider me educated
on this point at least

  I’d have liked BL to ask us (the ones who already publicly said they received
at least one e-mail, preferrably as a call for all users, through the thread,
not though a general message) for the e-mails¹.  Or at least make a list of us. 
Then make a quick cross-ref in the DB to know if we had sellers in common.  Then
reach to/check these sellers if possible.
Maybe things have been done… but all we have is Russell’s short messages.


¹ Well, I forwarded my copy when I contacted the admins but that’s only one.

Yes, this is what I'd have liked to happen as well, and my first thought
was also that there must be a common user. I suspect now that there possibly
isn't, but if I were on the BL side I'd want to build up a better picture
of what's gone on just to be certain there was nothing I could do to improve
our own policies.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 11, 2022 18:25
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 41 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  There’s two ways I see how they could get them: from a BL user (intentional or
not) or from BL (intentional or not).  (Hmm, okay, that would make four ways
)

Our point is that the first way (from a user) is rather easy.  And my point when
I answered you was that because BL sellers are targetted in a LEGO scam doesn’t
rule out the hypothesis of the source of addresses being a BL user (intentional
or not): once you have the addresses and the “idea” to scam BL users, whichever
came first, if you don’t already know which addresses are sellers’, you can still
learn it quite easily.

Another argument for a user being the source for the addresses is that it seems
pretty few people got the e-mails, relatively to the number it could be if they
got all the addresses from BL.
Or are they limiting themselves because too many e-mails sent would make them
easier to spot as scam?  Seems to me we spotted them easily

Exactly.

By the way, I now understand your name.

Sylvain Le Scammer
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 11, 2022 19:03
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 41 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, 1001bricks writes:
  […]
By the way, I now understand your name.

Sylvain Le Scammer

No, it’s Sylvain Le Sylvain because there’s people claiming to be Sylvain.
Imagine the gall!
There can be only one!
Hey, I heard you all give thanks for that!
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 12, 2022 12:14
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 39 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, SylvainLS writes:
  There can be only one!
Hey, I heard you all give thanks for that!

Nah, I at least do like having the pair of you around. But two is enough. No
more, OK?
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 12, 2022 12:26
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 44 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, Llewyn writes:
  In LANG Deutsch, SylvainLS writes:
  There can be only one!
Hey, I heard you all give thanks for that!

Nah, I at least do like having the pair of you around. But two is enough. No
more, OK?

According to https://en.wikipedia.org/wiki/Silvanus_(mythology) , there’s three
of us for each estate (domesticus, agrestis, orientalis).

I think Sylvain of 1001bricks is orientalis because he has been here the longer.
Because of my surname, I don’t think I can be domesticus, so I’d be agrestis.

So, where’s our missing domesticus?
Maybe he stayed home
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 12, 2022 12:47
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 37 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, SylvainLS writes:
  According to https://en.wikipedia.org/wiki/Silvanus_(mythology) , there’s three
of us for each estate (domesticus, agrestis, orientalis).

I think Sylvain of 1001bricks is orientalis because he has been here the longer.
Because of my surname, I don’t think I can be domesticus, so I’d be agrestis.

So, where’s our missing domesticus?
Maybe he stayed home

Oh no, this is like that feeling when you know there's a large spider
somewhere in the bedroom, but it's much worse because you can no longer see
it, right?

I suppose, given your forum roles, salutaris might be more fitting for you than
agrestis though.
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 12, 2022 12:59
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 36 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, Llewyn writes:
  In LANG Deutsch, SylvainLS writes:
  According to https://en.wikipedia.org/wiki/Silvanus_(mythology) , there’s three
of us for each estate (domesticus, agrestis, orientalis).

I think Sylvain of 1001bricks is orientalis because he has been here the longer.
Because of my surname, I don’t think I can be domesticus, so I’d be agrestis.

So, where’s our missing domesticus?
Maybe he stayed home

Oh no, this is like that feeling when you know there's a large spider
somewhere in the bedroom, but it's much worse because you can no longer see
it, right?

Oh, thanks for the reminder: just turn the light off and hear a patter on a sheet
of paper left on the ground, spring up in the bed and turn the light on and don’t
see IT, search everywhere, turn over the bed and don’t find IT.  Baaaad night.

Big hairy ones, those were, too.

Happy not to live there or at street/garden level anymore


  I suppose, given your forum roles, salutaris might be more fitting for you than
agrestis though.

Yep, Salvator Mundi would do too
 Author: Llewyn View Messages Posted By Llewyn
 Posted: Apr 12, 2022 14:31
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 67 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Llewyn (203)

Location:  United Kingdom, England
Member Since Contact Type Status
Jan 14, 2018 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Sherburn Sets
In LANG Deutsch, SylvainLS writes:
  Oh, thanks for the reminder: just turn the light off and hear a patter on a sheet
of paper left on the ground, spring up in the bed and turn the light on and don’t
see IT, search everywhere, turn over the bed and don’t find IT.  Baaaad night.

Big hairy ones, those were, too.

Happy not to live there or at street/garden level anymore

I hope at least they trained you not to leave pieces of paper lying around! If
it's any consolation your garden level comment has reminded me of a teenage
holiday in Ardėche where I drew the metaphorical short straw and ended up with
a hobbit hole in the banking below the gîte's terrace. No spiders, but dozens
of the hugest centipedes or millipedes I've ever seen. I don't think
I slept all week.

  Yep, Salvator Mundi would do too

*bows respectfully*
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Apr 12, 2022 13:31
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 40 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52265)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
  According to https://en.wikipedia.org/wiki/Silvanus_(mythology) , there’s three
of us for each estate (domesticus, agrestis, orientalis).

I think Sylvain of 1001bricks is orientalis because he has been here the longer.

Au moins je ne suis pas à l'ouest, moi


  Because of my surname, I don’t think I can be domesticus, so I’d be agrestis.

Could you be the missing Hereticus?


  So, where’s our missing domesticus?
Maybe he stayed home

You passed a Dad's Joke Degree, didn't you?
 Author: SylvainLS View Messages Posted By SylvainLS
 Posted: Apr 12, 2022 13:41
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 49 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

SylvainLS (46)

Location:  France, Nouvelle-Aquitaine
Member Since Contact Type Status
Apr 25, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store Closed Store: BuyerOnly
BrickLink Discussions Moderator (?)
In LANG Deutsch, 1001bricks writes:
  […]
You passed a Dad's Joke Degree, didn't you?

I graduated from l’École du rire
 Author: legoadam View Messages Posted By legoadam
 Posted: Apr 7, 2022 15:14
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 106 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

legoadam (387)

Location:  France, Auvergne-Rhône-Alpes
Member Since Contact Type Status Collage
Dec 29, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
View Collage Pic
Store: The Hittite Sun
BrickLink Translated Help Editor (?) - Turkish
Hey Russel!

I have received e-mails from Brick24 and SMYK Poland.

FYI
 Author: EGTC View Messages Posted By EGTC
 Posted: Apr 10, 2022 11:14
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 82 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

EGTC (4273)

Location:  Germany, Thüringen
Member Since Contact Type Status
Jun 23, 2002 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Minifigs Paradise
Hallo,

habe es erst jetzt gesehen.

Es kam mir schon merkwürdig vor, daß von einem Rainer Salewski/ KB-Bricks die
gleiche Email kam, nur mit einer anderen Liste.

Da beide nicht auf Fragen antworten, könnte ein Zusammenhang bestehen.

Grüße

Matthias
 Author: Bausteinfreak View Messages Posted By Bausteinfreak
 Posted: Apr 13, 2022 09:24
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 65 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Bausteinfreak (292)

Location:  Germany, Niedersachsen
Member Since Contact Type Status
Dec 7, 2020 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Bausteinwelt
In LANG Deutsch, good_old_bricks writes:
  Hallo Zusammen,

eine eindringliche Warnung an alle Bricklinker:

Am Samstag/Sonntag ging eine Scammail raus dessen Verfasser meinen Namen und
meinen Onlinestore "Good Old Bricks" missbraucht. Die Betrüger haben eine URL
"goodoldbricks.de" registriert und verschicken unter "info@goodoldbricks.de"
eine vermeintliche Verkaufsliste von unerhört günstigen "Exklusiv Legosets" die
sie sogar mit einem kopierten Logo von uns versehen haben.

Wir weisen ausdrücklich darauf hin, dass die Emailadresse
info@goodoldbricks.de und die Domain goodoldbricks.de
nicht zu uns gehören und wir keinerlei Werbe Emails verschicken!

Solltet ihr solche Mails erhalten haben, dann handelt es sich hierbei um professionellen
Scam / Internetbetrug!

Wir distanzieren uns ausdrücklich von den entsprechenden Emails.

Geht bitte nicht auf etwaige Angebote ein und überweist auf gar keinen Fall
Geld für diese "günstigen Legosets". Good Old Bricks verkauft Lego exklusiv
über Bricklink und betreibt keine Mailwerbung.


Solltet Ihr eine entsprechende Werbe E-Mail unter meinem Namen erhalten haben,
leitet mir die gesamte E-Mailkorrespondenz bitte an folgende Adresse weiter.

scam@good-old-bricks.com


Rechtliche Schritte werden eingeleitet. Meine Daten sind alle öffentlich verfügbar,
aber woher die Scammer die Emailadressen der Bricklinker haben (und bisher haben
sich bezüglich des Scams nur Bricklinker bei mir gemeldet) entzieht sich meiner
Kenntnis. Es waren bisher auch keine Kunden von mir dabei. Bei mir ist also offenbar
nichts undicht....

Sorry an alle Kunden die heute Ihr Lego von mir haben wollten - aber der Arbeitstag
ging bisher voll für diese Sch**** drauf. Es rennen so viele ***** rum...

Ich rede mir aus reinem Selbstschutz trotzdem ein: Die Id**** sind in der Minderheit
und wir sind einfach die Mehrheit (ab einem gewissen Machtlvl ist die Mindereit
natürlich trotzdem unerträglich)!

Viele Grüße und Spaß beim Werkeln,
Simon


Hallo Zusammen,

in meinem Namen wird auch so eine Mail gesendet
 Author: EGTC View Messages Posted By EGTC
 Posted: Apr 13, 2022 10:42
 Subject: Re: Achtung SCAM unterwegs.
 Viewed: 109 times
 Topic: LANG Deutsch
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

EGTC (4273)

Location:  Germany, Thüringen
Member Since Contact Type Status
Jun 23, 2002 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Minifigs Paradise
Hallo,

daß stimmt. Mit dem gleichem Inhalt wie bei den Anderen.

Bausteinwelt GmbH

Kam Gestern 21.16Uhr.

Grüße

Matthias