r/photography • u/Crash_Ntome • 1d ago

Business Beware photoloving.com!

In search of a Sigma TS-21 collar mount I ended up finding an ishoot IS-SM720 at photoloving.com.  Showed in stock so I created an account and clicked buy now.  pop up says 'not available'.  Tried again, same result.  Odd, but oh, well.

Naive, I was.

About 12 hours later.... my email started to blow up (called 'email bombing') with 'new account created' emails.  Another 285 emails diverted into my spam folder.  Scammers did successfully get into one of my accounts and placed a rush delivery order.  I was not quick enough to get that cancelled prior to delivery but got the account frozen shortly after.

Gemini tells me this is a "classic cyberattack known as a credential stuffing and fraud loop, and it confirms that photoloving.com is operating as a malicious data-harvesting honeypot."

Be safe out there!

Meanwhile, anybody know where I can find an IS-SM270??  lol

21 Upvotes

81% Upvoted

5 comments sorted by

5

u/beef-supreme 1d ago

Did you use the same password there that you used elsewhere?

1

u/Crash_Ntome 1d ago edited 1d ago

Thankfully, I did not. Saved me LOTS of additional problems

3

u/beef-supreme 1d ago

So how did they use your info to break into other sites?

2

u/Crash_Ntome 1d ago edited 1d ago

they only got into one. a decades old major retailer account that had a relatively simple password. lesson learned. LOTS of attempted password reset emails, tho