Mail asking to reset my Sync password
In the last hour, I received twice the same email :
You asked to reset your Sync password. To do so, please click this link:
This will let you change your password to something new. If you didn't ask for this, don't worry, we'll keep your password safe.
Best Wishes The Services Team
I didn't as to reset my password. But this mail comes into the mailbox I use in my Sync account. The username is the same I often use on several account (like here), but I don't think I used it in my Sync account, and it can't be find from my only mail adress. I changed the key in the URL and remplaced the begining with xxxxx, so nobody can click instead of me. I obviously didn't click on the link. I don't know if somebody is trying to log into my Sync account or if this is some kind of pishing...
Removed the URL as it contains sensitive info - TonyE
Modified by TonyE
All Replies (8)
Hi,
You can forward the mail to abuse@mozilla.org
Please see this.
For a slightly outdated overview of the Sync reset process please see this. As can be seen from the article, no emails are involved.
mozilla.com is genuine, but the real link could be something else when right-clicking on it and Copy Link Location. You can also hover the mouse and see the actual link on the lower left corner.
Some types of malware in the OS could also hijack genuine links/DNS and lead to another location.
not sure if it's related, but in recent days there have been reports of leaked passwords of users from linkedin, eharmony & lastfm. in case you've used any of these services and happen to use the same password for your mail-account, please change your mail password immediately since it might be used to break into your account...
Thanks for your answers.
I'll send a mail to abuse@mozilla.org.
The real link is mozilla.com.
I have no linkedin nor eharmony account. I have one last.fm, with the same email but a different username. I didn't use it for a long time. I just deleted it.
Thank you very much for reporting it.
You may also find this and the Related Articles useful.
Searching on Google, Yahoo, DuckDuckGo etc. for email headers, find email origin etc. would yield a lot of useful information.
There is indeed a password reset option in Sync which involves email from mozilla.com. You will receive an email similar to the above with a different Key when you choose to Set Up Sync > I have an account > I don't have the device with me > Reset Password. A likely possibility could be that someone made a mistake while entering their email address and it ended up in your mailbox.
Really sorry about the previously posted misleading information.
Modified by dumdidadida
Hi kramp,
Please see the previous post. Sorry for the confusion.
OK, this may be a mistake. But twice in less than 2 hours, and my email address is really specific (not gmail nor hotmail), and I'm surprised somebody could have one email address close to it.
You could send a request to abuse@mozilla.org explaining the situation. If this is not an isolated incident they may be able to help regarding the origin of the reset requests.