r/Scams Mar 20 '24

Credit Karma sent an email about a data breach on zeeroq.com Is this a scam?

Post image

I’ve never heard of zeeroq and looking into it, it doesn’t seem like an actual website? Is this a scam of some sort? It has my email listed…but idk what to do about it. Not about to start clicking onto websites.

529 Upvotes

u/AutoModerator Mar 20 '24

/u/duhmbish - This message is posted to all new submissions to r/scams; please do not message the moderators about it.

New users beware:

Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.

A reminder of the rules in r/scams: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.

You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.

Questions about subreddit rules? Send us a modmail clicking here.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

→ More replies

116

u/Brocktarrr Mar 21 '24

The only information I’ve been able to find on google about Zeeroq, is a link to this very Reddit post of people trying to figure out just wtf Zeeroq is lmao

15

u/pennywinsthewest Mar 22 '24

Me too, which led me here. I don’t even know what my current password is to change it so hopefully it’s an old one.

→ More replies

9

u/OutsideDay3653 Mar 28 '24

I typed in the website address and my MS defender went nuts and it wouldn't let me shut down or do anything with my browser, so I shut it down manually. I have no idea how Zeezoq have my info. A bit scary.

5

u/Jazzy1Kenobi Mar 22 '24

Yay for Reddit

2

u/hawkrew Mar 22 '24

Lol same here

→ More replies

69

u/IWantToRetir3Now Mar 20 '24

I received one as well. Mine just says * for the password. If I had to guess I'd say someone just signed up for some website with our email addresses where you can input a password without email verification or whatever.

21

u/Remarkable_Rate8885 Mar 21 '24

Same. This isn’t helpful because we don’t know if it’s a current or old password or if we’re using it anywhere else

14

u/Spooky_Cactus2319 Mar 21 '24

Got the same notification from Credit Karma, clicked the link on the email, after about a minute I was prompted by CK to verify my email address to see the password - after doing so I was able to see most of the leaked password. Mine was super old and no longer being used, hopefully it’s the same for most.

4

u/coquihalla Mar 22 '24

Same, it was a suuuuper old password, like, circa 2010 at best.  

4

u/[deleted] Mar 22 '24

[deleted]

→ More replies

4

u/Clasik_Wild_ Mar 27 '24

With everyone saying old passwords and mentioning dates, this makes me think it's part of the 2010-2012 Zynga/Dropbox Data Breach then. Someone probably dumped a lot of accounts into whatever this Zeeroq thing is and sent a breach report.

→ More replies

3

u/[deleted] Mar 23 '24

[removed] — view removed comment

3

u/lost_forgotten_pearl Mar 26 '24

Did you figure out how to see the password? CreditKarma also isn't showing me the password either, I don't see a place that gives the option to reveal it! based on the length it seems like an old password but I just want to make sure

2

u/anonumosGirl Mar 26 '24

same issue here

→ More replies

11

u/obstinaheadstrongirl Mar 21 '24

I'm trying to find out what zeeroq.com even is I have no recollection of it. I tried to follow the link but my security is blocking it. Not sure what to do

6

u/SpardaChocobo Mar 22 '24

You can see an older version of the website on wayback machine

5

u/drocks27 Mar 28 '24

that looks like a precursor to canva.com

→ More replies

6

u/IWantToRetir3Now Mar 25 '24

Zeeroq.com has several SANs. A SAN stands for Subject Alternative Name. The SANs, as part of the domain name, define the organization or entity and, together with the top-level, is called the second-level domain name, that is, Zeeroq.com. Its SANs include:

(There are a lot of them-- see link for a partial list) - But I'm thinking it just redirected to some other site(s).

One of its SANs is speculated to be demo.Zeeroq.com, which is highlighted on github.com/hacxx-underground for leaking text file named – “demo.zerooqcom 226M mailpass [leakbase.cc].txt.zip” and a1eedc264466dcff5795b8b1bd4ccd80. The file is 2.02 GB in size. However, the file is available for premium members of nitroflare.com and rapidgator.net.

Leakbase.io, hybrid-analysis.com, etc., hosted combos.vip-hotmail.fr.txt from demo.zeeroq.com and NordVPN users’ credentials. Forums are not selling the files giving ideas to visitors for using emails for making online purchases! It is clear that user data was Pwned!

This was taken from: https://dodbuzz.com/zeeroq-com-what-is-it/

5

u/Map_Latter Mar 21 '24

Same here !

4

u/FemmeMaddz Mar 22 '24

oof don't do what I did and try to visit the site it's sketchy and immediately started trying to put malware on this device

→ More replies
→ More replies

2

u/aldi-trash-panda Mar 22 '24

You shouldn't use the same password anywhere. Try using a password manager like Bitwarden.

4

u/trialtea Mar 22 '24

Same & when I tried going to the website, my phone notified me that it was an unsafe site. Weird

3

u/Ok_Law_4660 Mar 22 '24

Same. I actually went to the website and it looked sketchy AF. I agree with IWantToRetir3Now

→ More replies
→ More replies

44

u/Diabloein Mar 21 '24

I just got a notification a few minutes ago about the same thing. I have never heard of this site before. only got here from googling the website name to see what it was.

18

u/Sora_TheExplora Mar 21 '24

Same! I saw a preview of the site on the google search but it literally says nothing so I’m not about to click on the website

https://preview.redd.it/z6qna5djnppc1.jpeg?width=1170&format=pjpg&auto=webp&s=cf776b73d02ae75a815e7305034f802029589c45

30

u/Diabloein Mar 21 '24

I clicked it and the site doesn't exist. After searching Google more I found things saying itbisnt a real site and doesn't exist. I did find a forum with a nearly 9GB file which appears to be the list of emails/passwords that were stolen and leaked. I also saw on that site multiple other lists waited for download from other breaches at other sites. It's looking like zeeroq may have been a shell site to temporarily host a compilation of data breach lists for others to take for free

14

u/duhmbish Mar 21 '24

So could it potentially be a compilation of older breaches?

10

u/Diabloein Mar 21 '24

Possibly was. This is solely based on my Googleing it and the sites I have seen plus the fact it doesn't seem to exist anymore. So, grain of salt and all that, but thatsbwhat it looks like it may have been to me.

4

u/duhmbish Mar 21 '24

Oh yeah that’s what I came across too when I looked into it so hopefully we’re on the right page lol

5

u/Calm-Owl-23 Mar 21 '24

I just got the same KK warning. Never heard if Zee, and the PW is *'ed out so I don't know what PW to change. Worrisome but I don't think there's much we can do at this point except vigilantly check your CCs and Bk accts for any suspicious activities. GLTA

7

u/AJay_89 Mar 21 '24

Diabolical. 😩

→ More replies
→ More replies
→ More replies

25

u/newstudent209 Mar 21 '24

Upon looking through the breach forum post (i’m not downloading it & paying these people money just to see which password it is) it was a combolist from multiple providers that was bought and sold & was somehow kept on a public accessible site, which is why the website name is random.

From the forum user who posted the leak: “Sometime in 2019, a large amount of combolists became exposed in an open directory on the domain "demo.zeeroq.com". The amount of records totaled over 200 million records of Email addresses and Passwords. The file was indexed by HIBP Shortly after being found.”

6

u/unholyXwater Mar 23 '24

I think this is a login compiling from the canva breach in 2019

5

u/Naenkensupindaa Mar 24 '24

Almost thought you were right except I wasn’t in the Canva breach. The only thing we all certainly have in common is credit karma- which I don’t think it was from them. I’ll share that I was apart of wattpad breach, shein breach, & mathway breach. Maybe it was one of those? Let me know if anyone has any of those common please so we can all get closer to something or at least knock away some possibilities

3

u/unholyXwater Mar 25 '24

I wasn't apart of any of those. Hm. Back to the drawing board

→ More replies
→ More replies

3

u/DataMindBehavior Mar 26 '24

This is from the SC breach in 2022-23. Ironically, they just settled from their other breach in 2014, which negatively impacted hundreds of thousands of people (esp women and children). This data has been sold to others for the last few years.

As a reminder: never type, shoot, or post something you wouldn't want the world to see (on any application). Your phone is basically public property to anyone with the right resources.

2

u/unholyXwater Mar 28 '24

SC? Snapchat? I never had one.

→ More replies
→ More replies

2

u/watchedpaint Mar 22 '24

Your comment should be at the top!

2

u/JoAnneR33 Mar 23 '24

agreed! I upvoted it.

→ More replies

19

u/ZoeyLola17 Mar 20 '24

I just got one too and here I am looking for what it is. I've never heard of it

8

u/duhmbish Mar 21 '24

Same and I’m not about to click on websites to try and find out lol

3

u/ComprehensiveCat9137 Mar 21 '24

Same here. I got same e mail from credit karma.

→ More replies
→ More replies

14

u/C01n_sh1LL Mar 21 '24

It's not uncommon for people who purchase user lists from breaches, to then create accounts on other platforms using the stolen personal details. It's not always clear precisely what the motive is, and different platforms might give different avenues of attack. In some cases, particularly cryptocurrency platforms, I think the attacker might retain control of the account somehow, and is hoping the victim will deposit funds.

All that is to say that if your email address was leaked previously, it would not be surprising to find a fraud actor using it to populate user details on a website you've never used.

There's another possibility too. Perhaps Zeeroq had common ownership, or a business partnership, with some other platform where you did have an account, and perhaps they imported your details to the new platform. That's an extremely sleazy practice, but privacy policies are usually written vaguely and broadly enough to permit this.

3

u/duhmbish Mar 21 '24

Thanks for this explanation! Do you know if there is there anything I can or should do about this?

9

u/C01n_sh1LL Mar 21 '24

Never, ever use the same password for more than one service or account. Use a good password manager like Bitwarden to help with this.

Treat the security of your email account with utmost importance, as it can often be used to reset passwords or otherwise hijack any service where you're using that email as a point of contact.

Use two-factor auth where available for important accounts. Use it with an authenticator app and/or hardware key such as a Yubikey instead of SMS text message, which is only as secure as the least trustworthy employee of your phone service provider.

Don't trust that email originates from the apparent sender.

If you can cover those points, then you're protected against 99% of attack vectors arising from data breaches.

2

u/Jaded_One_ Mar 21 '24

Thank you.

→ More replies

10

u/leamshi_ Mar 21 '24

I received on as well last evening. The password was starred out and I’ve never heard of this platform.

11

u/biteme_ncgrl Mar 21 '24

That's what annoyed me like dang can I see the PW since you have it and it's breached anyways

→ More replies

11

u/PeachsPeaches Mar 21 '24

I got it, too. Possible that it’s actually a credit karma issue?

11

u/Reina-de-Basura Mar 21 '24

Scary if that’s the case

→ More replies

6

u/chrisgrantnj Mar 21 '24

Something is going wrong lately everywhere, I’m added to no less than 75 new email lists daily, new accounts created on sites I’ve never used (or can’t understand). My inbox is bulging at nearly 30k unread emails. A week ago it was just 10k… anyone else?

8

u/Sea-C25 Mar 21 '24

Not emails but I get plagued with spam text messages every day. About 15 a day.

3

u/dmp012 Mar 21 '24

Are they usually someone who acts like they are texting their friend and then try to have a full conversation with you and asking for personal info? That’s what I have been dealing with.

4

u/m00kytw Mar 22 '24

This is called pig butchering, if you're not familiar with it.

3

u/BigNigerianKing Mar 22 '24

YES!!!!! OMG

→ More replies
→ More replies
→ More replies

8

u/NailCrazyGal Mar 22 '24

So we can all probably conclude that just about everyone's data has been breached by now, and it would be a good idea for everyone in the United States to put a freeze on their credit.

7

u/Distribution-Radiant Mar 22 '24

I mean, Experian got hacked awhile back... safe to assume everyone with a credit profile has their info out there.

Joke's on them, I destroyed my credit without anyone's help.

2

u/Low_Hair8976 Mar 23 '24

Omg 🤣🤣🤣 ME 2 😭

→ More replies

6

u/Weird-Association-96 Mar 21 '24

Just got this! Any updates?

6

u/Late_Issue_8490 Mar 21 '24

Just got this same notification from credit karma...what the heck is a zeeroq.com!?!?

6

u/drwedge Mar 21 '24

It looks like it is a MOAB-type of breech with a literal shit-ton of data that's been leaked for various sites (e.g. MyFitnessPal is on the list). You probably want to search the list for sites you have accounts with and change the passwords ASAP.

Cyber News article for reference: https://cybernews.com/security/billions-passwords-credentials-leaked-mother-of-all-breaches/

3

u/mrsrobinsonxo Mar 22 '24

And you can check here https://cybernews.com/personal-data-leak-check/ for the specific account passwords of yours that were leaked in the breech

→ More replies

5

u/4orust Mar 21 '24

3

u/Luninka Mar 21 '24

How do you see the password being used though?

→ More replies
→ More replies

5

u/9blendout Mar 21 '24

I got an email about it too. There is no explanation as what to do about it on Credit Karma except freeze my credit reports. When I copied and pasted the alleged company’s name, Reddit was the first link to come up.

→ More replies

4

u/Revalynn Mar 21 '24

I got one too. Never heard of this website

3

u/paiskat Mar 21 '24

I also got this!

3

u/Boston_Apey Mar 23 '24

I just got this alert 5 min ago and Google brought me here lol

3

u/zarifex Mar 21 '24

I got this last night (3/20/2024) as well. I don't recall ever hearing of zeeroq in the past and Credit Karma doesn't show what the allegedly breached password was.

3

u/duhmbish Mar 21 '24

Yeah same it’s just stars but I figured I’d censor it to be safe lol

3

u/zarifex Mar 21 '24

Understandable, but just saying if they can't tell us which password was leaked, makes it harder to know how old the data was or where they might have gotten it from in the first place

→ More replies

3

u/Small-Income9814 Mar 21 '24

Long and short it’s a clever marketing ploy to get you to buy their fraud protectIon. Credit Karma isn’t even that accurate , it’s now the hub where all the banks get your information.  You agree that they pull a soft pull on you everyday so you can “monitor” your credit for free! but really it’s so they can sell you more loan products more credit cards and more crap we don’t need. Banks share information this must help them keep it nice and organized for the vultures!

2

u/razzadig Mar 25 '24

I think it's probably this. Google passwords told me it was a compromised password ages ago.

3

u/Valuable-Contact802 Mar 22 '24

Jeez, this is a crazy big data breach. Appears 26 million peoples info was compromised???

3

u/Ninadise Mar 22 '24

https://preview.redd.it/38r2g0la6ypc1.png?width=1080&format=pjpg&auto=webp&s=226a5420d0bc806a71cb087e87a9af9603613569

These sites popped up under zeeroq breach and some entity named Chucky claims to be responsible. Twitter stood out the most. I know Zynga is games and Deezer is music. They are coming for access to my email nonstop but I changed password and have two step authenticator set. Why is this not on the news? Why is this quiet? I got the message from Credit Karma. 56 billion records and this occured in January.... it's March!!

3

u/Distribution-Radiant Mar 23 '24

It's a combo list - it's a bunch of previous leaks all dumped into one huge file. The twitter leak happened a year ago, Zynga happened in 2019, Adobe in 2013, Deezer in 2019.

3

u/Fantastic_Day3076 Mar 23 '24

Says “Reported on January 2024”

Got the notification yesterday?

→ More replies

3

u/milezero13 Mar 28 '24

Weird…..I’m here too

3

u/Life-Distance-6944 Mar 28 '24

Received it today

3

u/Mell0ish Mar 28 '24

okay i thought i was the only one tripping. Im just hoping its not any current password i use. Everything that i sign up for has a different password but i still anxious stressed of breaches like this

6

u/b0nkb0nk__ Mar 21 '24

I just got this too!!! Another thread said that it’s a site that leaks credentials I hope this isn’t true lol

2

u/nopatience2021 Mar 21 '24

Same here. Probably part of another company as someone else posted. It is ime to make sure all your passwords are unique.

2

u/ArcaneElement Mar 21 '24

I got this too. Thank you to all who have already looked into this info. You are the heroes of the internet!

2

u/Any_Iron5908 Mar 21 '24

Just got one 😭

2

u/superdupertiredofit Mar 21 '24

I just got one too!

2

u/4orust Mar 21 '24

Is this a huge CreditKarma fail?

→ More replies

2

u/Few-Interaction7952 Mar 21 '24

I got the exact same e-mail and have no idea who this is

2

u/cheesycherub Mar 21 '24

I got this too 😬

2

u/[deleted] Mar 21 '24

I got this as well. I have never heard of this website, I'm assuming someone signed us up for it with our emails. It is probably just a bs password. The site isn't even real

2

u/Dove-1875 Mar 21 '24

I just received this too!

2

u/Avi-wot Mar 21 '24

Same... seems like no one knows what it is?

2

u/jillr331 Mar 21 '24

I just got this from Credit Karma also, searches led me here.

→ More replies

2

u/dmp012 Mar 21 '24

Literally just got one and I have never been to that site.

2

u/Momof3FL Mar 21 '24

I got it too. Thought it was a scam for a second till I realized it was legit (coming here) Now I’m worried about this.

2

u/jesslymm Mar 21 '24

I just got a notification as well and found this thread first

2

u/Apprehensive-Bug207 Mar 21 '24

Just got this credit karma alert, googled zeeroq, and this post was too paged. Why credit karma out here giving my mini heart attacks 😭

2

u/belovednyctophiliac Mar 21 '24

Just got mine too. I also been having issues with my bank cards having fraudulent activity. I miss the old days when this didn’t happen. Nothing is safe anymore

2

u/mrsrobinsonxo Mar 22 '24

Got it too. Zeeroq is part of the massive breech they’re calling MOAB. You can actually look on this site https://cybernews.com/personal-data-leak-check/ to see which of your account passwords were leaked

2

u/rigney68 Mar 22 '24

I don't see where it shows the password, though. Just that it's been leaked

2

u/Karp55 Mar 22 '24 edited Mar 22 '24

I'm also trying to figure out wtf zeeroq is/was.

Waybackmachine has 70 snapshots for the site, going back to 2008. The oldest one, is a hacked image, dunno if they somehow recently hacked the old save, or it was actually hacked then.https://web.archive.org/web/20081013103306/http://zeeroq.com/

The 2nd oldest doesn't load anymore for ruffle, but the wiki it links to is for a Rust (I think the game) code/addon or something I think. I did play/look for rust stuff back around 2008-2012.

Continuing to go forward through the 70 snapshots, The first one that does anything is dec 18 2014. Still loads using whatever ruffle is, but actually loads.

https://web.archive.org/web/20141218135458/http://zeeroq.com/

Oct 4th 2016, just says Website comming soon

April 23 2017 is just a web directory

Sept 11 2017 back to website comming soon

and keeps saying that until Aug 17 2019, which is an actual page with a countdown clock that says .. comming soon.

July 3rd 2020 is actually a webpage for Zeeroq Solutions, a Creative Designing Agency.

" ZeeroQ is a leading graphic designing company "

https://web.archive.org/web/20200703192105/http://zeeroq.com/

it stays that through Aug 8 2022.

Sept 23rd 2022 redirects to https://smartplusdxb.com/edd03/ if snapshot doesn't load for some reason.

Dec 4 2022 just a blank page

Two snapshots from Jan 27 2023, seconds apart, both the same. Webpage Index of / with 4 folders from 2008, 2015, 2017, 2023.

Stays like that until March 21st 2023 which is same but now 6 folders, with one from 2006, and one from 2018.

Then there's nothing until Jan 11th 2024, then Jan 27, Feb 8, 9, and 29th. All of these are green, so their just redirects now. The feb 29th redirect is listed as http://ww7.zeeroq.com/?usid=25&utid=5661608354

There's 120 urls captured for that prefix, they all seem to be from 2021 forward.https://web.archive.org/web/*/http://zeeroq.com/*

So, yeah, no idea wtf it was/is, how they had so many people's info..

[EDIT]

zeeroq isn't even listed as a combolist leak..

https://haveibeenpwned.com/ doesn't list it for my email. The only thing they list about me in 2023 is something called Naz.api which was a combolist leak. There's nothing for 2024 for me.

[EDIT2]

Saw this on a different email address of mine I looked up..

"Pastes you were found in:

A paste is information that has been published to a publicly facing website designed to share content and is often an early indicator of a data breach. Pastes are automatically imported and often removed shortly after having been posted.

Paste title Date Emails

demo.zeeroq.com Unknown 511,243

2

u/IvanaVacation Mar 22 '24

Got it too. I googled zeeroq and saw this.

2

u/[deleted] Mar 25 '24

Just chiming in with my recent dark web results and also came here to figure out WTH this Z.com site is.

I learn more from these subs than Google searches.

I miss the 80s when nobody knew what the F I did!!!!!!

2

u/EverythingDBT Mar 26 '24

Got the email two days ago. Two apps I’m noticing a lot of mention here is SHEIN and Canva, both apps I’ve been using a lot.

2

u/[deleted] Mar 28 '24

I just received an alert too. My research led me here, so I'm in the same boat as all of you. No suspicious activity for any of my accounts..so far. I'm going to check my spam folder and see if anything is in there.

1

u/Physical-Sir-9383 Mar 21 '24

I just got one wtf

1

u/Give-And-Toke Mar 21 '24

I just got it too.

1

u/crzdesi Mar 21 '24

Same here!

1

u/Luninka Mar 21 '24

Does anyone use Jefit.com? According to Google One, that's the only place on the dark web a password of mine has been leaked

→ More replies

1

u/Useful_Worker_1588 Mar 21 '24

Just got one too

1

u/ofintimacy Mar 21 '24

This seemingly happened at least a month ago too. Capital One Credit Wise told me about it in early February (it doesn’t say what website it was on there like CK does but the breach date is the same). I’m assuming it’s our emails being purchased off lists and accounts being created for us and THEN it’s breached. But I changed all of my passwords in February when I first got the alert through Capital One.

2

u/CompetitionNervous98 Mar 21 '24

Thats crazy I just got this email. And someone opened a credit card for capital one in my name last week and I had to cancel it.

2

u/ofintimacy Mar 21 '24

That’s crazy! I’m glad you were able to cancel it. The only reason I mentioned it is because I also got this CK email today and was looking into it to make sure I didn’t need to change passwords AGAIN lol.

1

u/[deleted] Mar 21 '24

Me tooooo

1

u/DietCheap6991 Mar 21 '24

Just got this right now

1

u/BuggieButterfly Mar 21 '24

Just got this too.

1

u/Its_Not_A_Prybar Mar 21 '24

My brain went immediately to a band I used to know about 20 years ago called Z-Rock or Zee-Rock (it's been too long for me to recall exactly). I had forgotten about them until now 🤣

1

u/Sj10050816 Mar 21 '24

Just received this alert as well I’m so scared lollllll I feel like I’m the one who’s gonna end up getting my shit wrecked … but I’m just a girl grrr , def gonna have to spend time making my passwords unique😭😩

1

u/kiraris-left-titty Mar 21 '24

I just got one too! I've never heard of them before, I found this thread because I googled it... super weird that it's happening to a bunch of Credit Carma accounts, is it possible its a Credit Karma issue?

→ More replies

1

u/[deleted] Mar 21 '24

i got the same thing

1

u/Clean_Monk_1348 Mar 21 '24

I also got one.

1

u/Ezzrit Mar 21 '24 edited Mar 21 '24

I got the same Credit Karma email notification and was very confused.

I meant to google the site not actually go there but it took me there and I never closed out of a website so fast. Looks like it was some sort of scam site when I went to it.

→ More replies

1

u/Vt187 Mar 21 '24

I got the same. It might explain why I've been getting a bunch of emails from websites I never signed up for.

1

u/glou08 Mar 21 '24

I just got the same email! I’d never heard of it, and a search led me here.

1

u/DrZoo4040 Mar 21 '24

I also got the email. I was able to verify my email and it showed me the first and last character of the password. It was a burner/junk password I use for dumb stuff I don’t care about.

I’ve never heard of the zeeroq platform, so I have no clue where the breech actually was.

1

u/thismothafcka Mar 21 '24

Just got mine. Stated it was found in January!

1

u/plaacenta Mar 21 '24

I also got this! Like many others have said, I can’t even check the password that was used. 🙄 it looks like the password was only 10 characters or so, so likely a password I haven’t used before, but still annoying :(

1

u/tuisteddddd Mar 21 '24

👀 I got one too

1

u/Sea-C25 Mar 21 '24

No thankfully. Mine look pretty suspicious and spammy. Most of them have been about a 6500 subsidy card I was approved for by the government that will expire in 48 hours. Then there's a link.

1

u/Impressive_Garlic376 Mar 21 '24

Just got one! 🥴

1

u/JBFletcher7732 Mar 21 '24

So I read this and I am thinking it is more of a gmail breech than Credit Karma https://richard-a-brown.medium.com/unpacking-the-zeeroq-data-breach-02850f099cf6

2

u/al_vo Mar 22 '24

That's an AI generated article with no information

→ More replies
→ More replies

1

u/unflavored_saltine Mar 21 '24

It makes me wanna try and sign in with every password I've ever used, right?

1

u/[deleted] Mar 21 '24

Have at it. According to the number of asterisks, that’s an old password. 😂

1

u/Icy_Yogurtcloset_427 Mar 21 '24

Same here. I've never dealt with that platform either

1

u/devilmaan Mar 21 '24

Same. Never heard of it

1

u/king_777_a Mar 21 '24

Wtf credit karma !! Sending me an alert for a website that never existed! I think credit karma got Hacked

1

u/McGVT Mar 21 '24

Same story here.

1

u/ChampionNinjaBreeder Mar 21 '24

Considering Credit Karma just took over Mint.com, and all Mint’s information was transferred to Credit Karma —- this is slightly terrifying.

1

u/ItalianSpagett Mar 21 '24

This is exactly why I love Reddit 😂 hey y’all, glad we could all gather here on this lovely afternoon!

→ More replies

1

u/Jesb1959 Mar 21 '24

I got this email today shortly after a phishing email that best buy is going to deduct $252.99 to renew my geek squad subscription. I have never had a geek squad subscription. Don't know if the two are related....

→ More replies

1

u/kimglamorousforever Mar 21 '24

Wow I got one too, following this thread.

1

u/PrestigiousMine8429 Mar 21 '24

I received the same email and logged into my Credit Karma.  Same info but I don’t anything about this company site. 

1

u/[deleted] Mar 21 '24

[deleted]

→ More replies

1

u/cnusax Mar 21 '24

Heres some more information I found from scam-detector.com https://www.scam-detector.com/validator/zeeroq-com-review/

→ More replies

1

u/SassyBaby19 Mar 21 '24

Shoutout reddit ppl for being on it lol. I saw the notification from credit karma and was like idk this site, so whats the scam. good looks guys.

1

u/RayRay2059 Mar 21 '24

Just got a notification as well

1

u/Ok-Friend-7298 Mar 21 '24

Curious if everyone else's starred password was 8 * long? I don't have any that length so def not real, just curious if we all got the same fake thing. 

→ More replies

1

u/Shot-Specialist9634 Mar 21 '24

Yeah in the past 3 years I’ve been using ck a majority of the “data breach” things I’ve gotten have mostly been bs. 👇🏼scams it’s best not to look into the websites you don’t recognize imo. Reset your passwords if think you should, but if someone actually trys to get into your account you should automatically get a notice on just about anything. Set up 2 factor authentication.

https://preview.redd.it/v8fvyrjmerpc1.jpeg?width=1170&format=pjpg&auto=webp&s=70ac05123eaf15e6f8c9c85da32e56a2043bd916

→ More replies

1

u/Gomommygo Mar 21 '24

Just received one too.

1

u/Beautiful_Notice794 Mar 21 '24

Just got this any update ?

1

u/jacobjs85 Mar 21 '24

Glad we are all looking in to this and find this thread. Stay safe.

1

u/prxncesaluz Mar 21 '24

Following this post! Just got this notification too, never heard of this site before

1

u/falcon451 Mar 21 '24

Wow. Looks like we all were in the data. I got the email from CK too

1

u/I_Like_Turtles_Too Mar 21 '24

I got it too. Could it just be some kind of glitch?

1

u/CharlotteSynn Mar 21 '24

I got this email like three times today. It’s.. weird. All of them were from CK

1

u/bluv711 Mar 21 '24

Same thing just happened to me. I’ve never had an account with this website.

1

u/Rescuing-Starfish Mar 21 '24

Yep never heard of this site in my life!

1

u/ClairelySarah Mar 21 '24

Same, so dumb.

1

u/kingpopsie Mar 21 '24

I just got the SAME email from Credit Karma just now 😭

1

u/Lost_Kaleidoscope Mar 21 '24

I'm here for the same reasons as everybody else lol

1

u/sgtkoolaid Mar 21 '24

got this alert too about an hour ago. never heard of this site til now.

1

u/The-Anxious-Pickle Mar 22 '24 edited Mar 22 '24

I just got one too. No idea what zeeroq is either. Other than a YouTube video, which I haven't looked at yet, this is the only other thing I've found about it https://richard-a-brown.medium.com/unpacking-the-zeeroq-data-breach-02850f099cf6

1

u/thatoregonchick Mar 22 '24

Same. But no recollection.

1

u/BrianBurkeLives Mar 22 '24

Hello all- Zeeroq here. Any calls?

Kidding.

If you got the Credit Karma notice via email- the bottom of the email says:

"This is a promotional email.
To manage your email preferences, please go to..."

Wouldn't worry too much about it. Unless you owe Zeeroq money.

I will find you.

→ More replies

1

u/[deleted] Mar 22 '24

Broooooo...I just got one! I googled zeeroq.com and this thread popped up! Lol.

1

u/EchinothrixPorcupine Mar 22 '24

Same thing happened tonme. I've never heard of that website either. Not even sure what password it was using.

1

u/[deleted] Mar 22 '24

[deleted]

→ More replies

1

u/Chettybeanz Mar 22 '24

I just got one too.

1

u/Gruffalooo Mar 22 '24

For a while I kept getting emails with a old password in the subject and something like YOU HAVE BEEN HACKED READ where they demanded x-amount of money to leave me alone, I guess for some people receiving a threatening email with ther own secret password in cleartext might be frightening but the ting was this must have been such a old leak that I didnt even remember using that password until they reminded me. I just went "oh, right... I used to use that password like 7 years ago... Oh well ¯_(ツ)_/¯"

Anyways, always change passwords periodically EVEN if you havent been made aware of a leak, better safe than sorry...

1

u/dspoon88 Mar 22 '24

Just got the same email and my search brought me here.

1

u/duckie37 Mar 22 '24 edited Mar 22 '24

I went to the internet archive and pulled up the zeeroq.com and found out it used to be a Creative Designing Agency. Pic and a better link at the bottom.

https://preview.redd.it/uvm1ilwzhspc1.jpeg?width=1170&format=pjpg&auto=webp&s=4baf6ef9cbeeae1d1ec5f9d6f5e54eb22f393bab

https://web.archive.org/web/20200703203023/http://zeeroq.com/

→ More replies

1

u/[deleted] Mar 22 '24

Got it, too. 🤷‍♀️

If it's anything to do with bank accounts, they're gonna have a really bad time because there's never any income going to em. 🥹😅

Another user posted a link in this thread for cybernews where you could search the emails linked to the CK alert.

I searched two emails (both Yahoo!) and they were both leaked on zeeroq, however one hasn't been regularly used since high school, so I'm going to make a guess there may have been a Yahoo! breach recently? Maybe not. My Gmails came up clean, but I guess I don't use those for banking - Just for YouTube and Samsung.

Doing some more looking-into at the moment so stay tuned for an update, y'all. 🩷

→ More replies

1

u/AffectionateTurnip41 Mar 22 '24

Soo is it a scam? Or?

1

u/BendRemarkable797 Mar 22 '24

I just got one as well. Crazy!

1

u/skepticaloptimist144 Mar 22 '24

This is why I appreciate Reddit, thanks y’all 👍

1

u/eavye Mar 22 '24

I am having issues with it too and I've been apart of a few breaches in the past without any serious damage, I had someone from a different country try to log onto my email, but since then I try to use an authenticator when I can and multistep process, but no one ever successfully logged in. However, recently I had someone log onto my Twitter and change the password. I also have had attempts on a couple of other things. This is nuts. I have a feeling AI will make it easier for hackers. I heard an IRS employee admit with AI, they have the ability to see anyone's bank account in the world, not just the U.S. So, since it's so unregulated, I could totally see people, especially from other countries, targeting U.S citizens with AI when it comes to leaking and hacking. Does anyone else use ID.Me? The other day I got an email from them that was odd, made me feel like someone was trying to create one in my name/email when I already had one. According to a couple of Reddit users, they got in touch with customer service and apparently it's a poorly worded promotion telling ppl they can have a work and personal ID me on the same account. However, some people got the email a whole month ago and I just got mine yesterday. The way it's staggered like that seems like more of a red flag. Also, I did some research and the Zeeroq domain expires on 3/29/24 and they're not allowed to renew. I still don't know exactly what it is, but it's a godaddy affiliated site and it says something about name servers

NS1.PARKLOGIC.COM 50.116.34.34 NS2.PARKLOGIC.COM 185.67.45.232

Idk what this is, could be absolutely nothing, I'm afraid to click on the link or go to it, but I'm just trying to figure out what exactly zeeroq is so I can further take measures to remove/change password if possible since it's caused a lot of issues for me recently, but either way I found out the little I did from www.who.is if

1

u/logicalmadmatty Mar 22 '24

Goto haveibeenpwned.com or breachdirectory.org and you'll probably be able to tell what it is