Recently we've been seeing a new phishing method that hackers like to use. So today, I'd like to take some time to talk about this new phishing method and how you can protect yourself.
What is the method?
This new method involves the use of screen sharing software or screen sharing websites. We've primarily seen the website
http://www.join.me used, however we're not discounting the fact that there may be other sites or programs being used to do this. The method is quite simple, you receive a PM from the phisher asking you to check out their link (they typically offer you some incentive, like free gold, items, etc). When you click on the link, you are directed to a screen-sharing website that has Gaia's login page featured. You are then instructed to login.
What's really happening?
You are actually logging into Gaia using the phisher's computer. From there the phisher can save your password and get into your Gaia Online account.
How can I keep myself safe?
The most effective way to keep yourself safe is to not log into Gaia after following this link. These links won't log you out, so there is no reason to log back in. If you click one of these links, just simply type in
http://www.gaiaonline.com to go back to Gaia's homepage.
Is all screen sharing bad?
Of course not. There are users within the art community like sharing their screen so you can watch them do art. This is fine. However, be wary of any link you follow that directs you to a screen-sharing site that asks you to log into Gaia.
Now I understand, but how do I identify this type of phishing?
Below is a screenshot from Join.Me. While this screenshot won't show every single instance that a phisher might use, this is a good way to identify whether or not you might be being phished.
To reiterate, Join.Me is not a bad site and has legitimate uses. Not every Join.Me link is going to be a phishing link, however phishers are using this site to attempt to phish other users. The above is just an example of what this may look like. If you see a Join.Me link that looks like this, then you know that you are probably being phished.
Anything Else?
Keep in mind that phishers can use this tactic not only to get your Gaia Online information, but they could take your bank information, e-mail, and more. So if you're ever asked to log onto anything from these screen sharing sites, then don't do it!