Произошла утечка баз данных пользователей на портале Nexus. Информация анонсирована декабрем 2015 года и актуальна для тех, кто имел аккаунт до августа 2013 года включительно и не менял пароль своей учетной записи. Администрация Nexus рекомендует сменить пароль учетной записи. У кого аккаунт был создан позднее, тех людей это не затрагивает. Особую ценность для взломщиков имеют премиум пользователи.
Текст оригинального сообщения:
Hi folks, Sorry for the full-page global notification (this is being shown to every one who logs in to the Nexus) but unfortunately, it seems some users didn't see the news back in December, or chose to ignore it, so we've had to make a bit more effort to spread the news. We announced back in December that there was a database leak beginning to circulate around hacker circles from Nexus Mods. This database leak occurred all the way back in July of 2013 and affects anyone who had an account before August 2013. The leak contained your username, your email address and your hashed/salted (e.g. encrypted) password. With our sincere apologies, we asked that everybody please change their passwords. Unfortunately, lots of people have not changed their passwords. We know, officially, that certain nefarious individuals are working on cracking as many of these encrypted passwords as possible and that the most simple ones (e.g. passwords like "password" and "123456") have already been cracked and used to login to people's accounts. If your password wasn't a very secure one before August 2013, it's likely it's either already been cracked, or that it's close to being cracked and could well be used to access the site. Now, this isn't really a major issue for you if you're just a regular user who comes here to get mods, and you only used the password on Nexus Mods. Worst thing that can happen to you is you get locked out of your account and you have to make a new one (you'd lose all your download history, mind). However, if you're a mod author or a Supporter/Premium Member, or if you used the same password on other sites, it's far worse. A malicious user could access your account to alter, deface or outright delete all your mods on the site. Similarly, they'd be able to more easily gain access to the other accounts on other sites you used the same password on. Obviously, that's pretty crappy for everyone! If such a thing happens, we have no real way of confirming your identity and getting your account back to you, so your account would be lost. So please, if you have not changed your password since before August 2013, or ever, please do so immediately on this page. If you registered on Nexus Mods after July 2013, this doesn't apply to you directly per se, as your account details were not included in the leak. However, this is still important information and, as you should be resetting your passwords at least once every 6 months, please take this as a password reset reminder. We apologise, once again, for what has happened and the annoyance this has caused. PS. The forums are a bit overloaded right now as everyone is trying to gain access to change their passwords and read the links provided. Sorry about that!
Сменить пароль не трудно. Переходим по ссылке
. Если вы авторизованы, кликаем на стрелку или на имя пользователя в левом верхнем углу рядом со значком. Выбираем My Settings
-> Email & Passwors
. Откроется страничка:
Далее заполняем соответствующие поля и следуем инструкции. Проверяете свою почту и после того, как придет письмо с подтверждением, активируете свой аккаунт.
Если текст с предупреждением появляется на основной страничке, как отметил Thorgal, нужно нажать маленькую зеленую кнопочку 'got it' в самом низу. Больше предупреждение не появится. Вы сможете вернуться к нормальной работе.