New site scam

[brandon]

Warning, there's a very very sneaky scam going around, mainly on forums due to its nature.

They will supply a seemingly innocent url (starting with www.habbo.co.uk or in the case tm found .ca) and claim it's a new login location or special moderator login.

The url will seem valid, the correct window title and the connection secured but don't be fooled

They use the loginticket variable to inject html to display an iframe positioned exactly over the standard login.

In the example tm found there was an additional variable at the start of the url with a number of underscores to hide the later malicious variable

He just come across an example on his own forum and he urges you all to be very very careful about clicking any link related to habbo however innocent looking.

[The Professor]

I dont understand how that is possible as habbo control the habbo.co.uk url but ill take your word for it.

[brandon]

I didn't quite get it myself but it was something I was told about.
Ask tm for more info lol

[theman0001]

yeah i found one of them, it was quite funny really i started putting in fake usernames and passwords.

the way you can tell is if the fonts are a different size or if you try to create a new account dont fall for it!

if someone is advertising a website on habbo and u go onto it and ur habbos logged off. TYPE in the habbo address (www.habbo.co.uk) and then log in form habbos homepage.

[Decode]

I dont understand how that is possible as habbo control the habbo.co.uk url but ill take your word for it.

I dont undersatnd as well. the login could be in an iframe but then the address wouldnt be the habbo address :s

[.townsendj.]

i knew a scammer and what he did he payed me 3 hcs every scam and now i got like a t but i finally reported him for what he done casue its not right and i did a giveaway and gave hcs out casue it wasny right haven stollen goods so i made a don8 room cause i was then poor and cause i was popular over the giveaway loads ppl don8ed so now im worth a t again through trading the things that got don8ed:eusa_danc :eusa_danc :eusa_danc :eusa_danc :eusa_danc :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap

[ReviewDude]

I dont undersatnd as well. the login could be in an iframe but then the address wouldnt be the habbo address :s

I think he means you can do this:

http://www.habbo.co.uk

[PappaLou]

i'd think it to be common sense to know not to go on any stupid "uber 1337 secret logins" seeming as most people are not idiots.

[quagmire]

i knew a scammer and what he did he payed me 3 hcs every scam and now i got like a t but i finally reported him for what he done casue its not right and i did a giveaway and gave hcs out casue it wasny right haven stollen goods so i made a don8 room cause i was then poor and cause i was popular over the giveaway loads ppl don8ed so now im worth a t again through trading the things that got don8ed:eusa_danc :eusa_danc :eusa_danc :eusa_danc :eusa_danc :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap :eusa_clap

and we don't care.

[.:TeamAmerica:.]

Thanks for telling us.
Alot of people will benifit from this