Beware free iPad messages

How do I delete my Sonos Community account please? 
I cant be bothered with getting scammers sending me private messages via a trusted forum

Same here, this account 

Аdministrаtоr-Ulise

Same…almost got me..

It just happened to me. Sonos is not doing enough to prevent this from happening. 

Hey! There’s more than 10 of us here….

Yet another way InSight/Gainsight is unfit for purpose.  Gotta figure a company that can’t even offer an adequate search feature isn’t too concerned about protecting its users from scams and Spam.

Same here, Administrator_Zion .  This is really poor form for Sonos, easily preventable. What data did they obtain? Were they able to access support info like names, addresses, phone numbers, or IP addresses? Will Sonos be notifying everyone about a potential breach?

Hi ​@Vitothepug, 

This was a phishing attack where multiple new accounts pretending to be admins were made on the community and reached out to users through private messages. Unless you followed the link, no sensitive data of the sort was obtained, as the only information these bots could receive without anyone following the link is already publicly on the forum.

If anyone has followed the link and/or filled out information on the page, I would recommend changing your password for Sonos.com and any other sites that you use the same password for. If you entered any payment details, contact your bank to freeze the compromised card and report any fraudulent charges.

I got one from Adminisrator_Zander.  Didn’t seem likely...

Why can a new account send private messages? That’s crazy incompetent. 

Just received one moments ago. You’re not doing your job 

I’m pretty sure a new account can still post links, which is Forum Security/Anti-Spam 101.  Not being able to send privates messages is a little more advanced than that.  So . . . baby steps.  😉

The link in the email took me into this site, where I replied to the private message ‘thanks’  … that’s all

Would this cause any issues?

If the email was a forum notification, from the forum, then not a problem.

Tedious and Déjà vu. A lot of wasted time/effort/money in ‘human’ moderation and community users discussing the flaws of community software/processes/implementation, advised to change passwords etc, when community users should be discussing Sonos.

I got one from Administrator_Urijah

I’m at least happy people are reporting this, rather than falling for it. I’m unhappy that Gainsight hasn’t been able to defeat this. I feel for the moderators who have to chase it, and manually clean it up. 

Maybe. Potential issues will be minimal if you did not supply any passwords or email addresses. Unfortunately, when you followed a link, this indicated that you will click on links to miscellaneous sites. Often, you will then be “sold” to other SPAMMERS. None of my browsers will automatically execute a link or fetch an image suggested by an embedded link. As far as the SPAMMERS are concerned, I never viewed their page. Some browsers will allow you to view the raw text without following any links. Lately this has text has been very messy and difficult to decipher because the SPAMMERS don’t want you to analyze their scheme. I look at the headers. If there is a reference to *.ru (a Russian server) or any other far east address, I’m no longer interested in the page.

The “smart” scammers will attempt to concentrate their efforts during hours when administrators are offline.

The weekend should be interesting, maybe a bit of overtime pay for the person stuck dealing with it.

Same here:

How difficult is it to detect a new user immediately accessing the PM feature?  Even if they only send a single PM, that should immediately flag the account for moderation.  This isn't rocket science, and the anti-Spam/anti-scam techniques as they apply to support fora are well known and several decades old.  This isn't Instagram or Facebook (though Instagram and Facebook are certainly more effective in thwarting scams).

Not to mention there should be easily configurable parameters to shut off PMs for new users, or users in general, after the first hint of a scam.  Instead, our history of low expectations for this platform has people speculating the scammers will know to attack on the weekend due to a lack of vigilance by a company whose business it is to offer a safe and effective support site.

I agree. And for those messages that do slip through the cracks, why isn’t there a “Report” button to report them directly to the real Admins, rather than us having to post each fake account in the forum?