BirdTalk subscribers beware

[tielfan]

I've been receiving suspicious communications lately about my subscription renewal which is currently due. It looks like someone has gotten hold of BirdTalk's subscriber information and is phishing and/or trying to hijack the servicing of the account. I suspect that BirdTalk's server may have been hacked since they knew my name, address, email address, and expiration date. Fortunately BirdTalk does not store credit card information for the account.

I pay for my subscriptions directly on the BirdTalk website and pay $13.99 for 12 issues. The account is NOT set up for auto-renewal and no outside parties have ever been involved. The first suspicious communication was a postcard from SynapseConnect saying my account would be auto-renewed at a rate of $32. Then today I got an email from Magazine Services (with a link to the website at Magazine-Agent.com: Magazine Subscriptions ) saying that I would have to opt out if I didn't want the auto renewal. Log-in is required to opt out, and just in case it was legit I tried to log in. They didn't recognize my BirdTalk password which confirms that it's bogus.

I've reported this to BirdTalk and thought I should warn the public while I'm at it.

[asulli]

Thank you for letting us know.

[MissV]

Tiel, I don't know if you've done so, but just in case....you should go change your password at the real site for birdtalk IMMEDIATELY.


Guys, never ever EVER put in your password for something to any site without confirming the URL address and if it's anything financial, it should have the icon of lock either in the address window, at the top of your browser, or at the bottom of it. If it does not have this, it is not a registered secure site and your information is very likely to be compromised.

It's not unusual for a fishing site to not work or show no reaction when you try to log in, because the purpose is to record the information and transmit it without you realizing what has happened.

[LovelySydney]

Thanks for the info because I just recently got a subscription!! Definitely good information to know.

[Lisa B]

I'll also fw it to the editor and assistant editor so they are aware too.

[idrial]

If have given them your password when trying to "log in", then I would change it immediately at the legitimate site. When you "log in" like that, they are actually collecting your password so they can complete the attack.

I would also report this to Bird Talk so they can contact their security vendor.

And in the future, don't try to "confirm" that they are hacking your account. That is called social engineering and its the most common way to compromise your account.

(btw I work as a computer security technician so this sort of thing is what I help people with every day)

[Lisa B]

from the assistant editor:
If you are contacted by an unauthorized agent, please let BIRD TALK know by sending an e-mail to agentorders@bowtieinc.com or by writing to:

Agent Orders
Consumer Marketing Dept.
BowTie Inc
PO Box 6040
Mission Viejo, CA 92690-6040"
--------------------

[tielfan]

Thanks everyone for the warning on passwords. I'm kinda dumb about these things. It also turns out that I kinda misspoke about the password. When I went to the BirdTalk website to change it, I realized that they don't actually use passwords (when I tried to log into the odd site I used the password that I would have used for BirdTalk if they required one). BirdTalk's login consists of entering either your account number, email address, or name and physical address, then one of those captcha code things. So anybody who has one of those information bits can still get into the account.

I just reported them for phishing using the advice at Report Phishing Sites Department of Homeland Security... wow.

BirdTalk just wrote back saying they get complaints every day about rogue agents like this. They keep a log of them, which doesn't sound very helpful.

There are a lot of complaints online about SynapseConnect ripping off people who actually buy magazines from them (overpriced magazines, not giving refunds for cancellations, auto-renewing cancelled subscriptions, etc). But I don't see anything about them abusing people who have never paid them anything.

[angelicarboreals]

I haven't gotten any emails about it, but I did get some bogus renewal slips in the mail for my REPTILES magazine (same publishing company). Just wanted to throw out there that they don't always come via your email. If you get a renewal form in the mail, it should have the magazine logo on it and the address that corresponds with the one on the inside of the cover of the mag. The one I got was through a "third party" and was too expensive to be for the magazine.

[Eliza]

Thanks for the warning, Carolyn!