Skip to main content

Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines

Phishing email asking for password change in the name of support@itch.io

A topic by 2DPIXX created Aug 07, 2023 Views: 550 Replies: 5
Viewing posts 1 to 4
(1 edit)

I don't know if you are aware of this, but I wanted to share this to warn everybody. There is a phishing mail going around in the name of support@itch.io that informs the reader of a data breach and recommends to change ones password. Following a weird insecure domain.

Please do not be tricked and never click on links within emails to reset your passwords. Maybe officials can inform the broader audience if this is needed. It never happened to me before so I do not know what itch.io does with this.

Pinned ReplyAdmin(+1)

Thanks for notifying us. We have no reason to believe a hacker got access to any systems, they are most likely exploiting publicly available information to craft phishing messages for specific account.

For anyone who has received an email like this, we want to see them. If you still have the email please reply to me, you can send a screenshot to our support email address support@itch.io.

Thanks

I send an email to support with the phishing-mail I received including all the meta information.

(+1)

I just got this email as well. The reset link leads to a similiarly named site, but not itch.io. It looks convincing, but that I found nothing on the itch.io website about this alleged data breach made me suspicious.

Admin(+1)

There has been no data breach on any of our services that we’re of. Most likely a scammer who happened to find an email somewhere and trying to use it to steal your account.

If happen to have this email still we would like to see it. We want to see the details of the sending account and the contents of the email.

(+1)

I just received a similar message as well. I sent a screenshot of it to the support address listed in the pinned reply.

This topic has been auto-archived and can no longer be posted in because there haven't been any posts in a while.