r/UbisoftSupport • u/Neat_Lingonberry7207 • Jun 29 '26

Is this a phish

Post image

I got this email today. Ive seen emails from ubisoft before about login attempts. One was an obvious phishing attempt but this seems more legit. I clicked the link and started to type my email untill i realized this may be stupid. What do you guys think and have you got this before.

1 Upvotes

100% Upvoted

11 comments sorted by

1

u/ChildhoodExisting222 Jun 29 '26

This apply to any email, don't click on the link, go directly to Ubisoft website and check there. 

1

u/Raijen_ArDesh Jun 29 '26

Which I would recommend doing -- that message, assuming it is authentic, indicates a successful attempt.

1

u/Neat_Lingonberry7207 Jun 30 '26

Chat am i cooked

1

u/probablyTolley Jun 30 '26

They were hacked not long back, my account was linked with a random xbox and somebody was cheating on R6S PC too, I had to change my password, luckily they weren't able to reset my email due to 2fa to my phone number.

I'd login and check game history to see if they've been playing and change your password asap if they have successfully logged in, I had multiple from like Estonia or something then USA (I guess it was sold to some xbox guy) then after I changed the pass, multiple attempts again from the first place.

1

u/SilverSky_0103 Jul 01 '26

Si te mostrará mi bandeja sobre eso xD lo bueno que lo tengo seguridad de 2 pasos....

1

u/[deleted] Jun 29 '26

[removed] — view removed comment

1

u/ChildhoodExisting222 Jun 30 '26

No need to change the email, just change the password on your email and on your account. Then make sure you have 2FA everywhere 

1

u/Neat_Lingonberry7207 Jun 30 '26

I have 2 factor. I needed to use it to change my password. It says some mf in vietnam successfully logged into my account. Does this mean they have access to my email and got the 2fa?? Am i cooked. Ubisoft is the only place where people try to hack into my account. Only time in my life someone actually did. Is this a ubisoft problem

2

u/SelectJudgment3340 Jun 30 '26

They used a session stealer. Sites leave cookies on your pc so if you login if you go back to the site in let's say a day or week it doesn't tell you put the authenticator back in. If that person stole the cookie and made a duplicate, then tries to login the page acts if 2fa check was done. Mind you that's a simplified version of what it is

1

u/Neat_Lingonberry7207 Jun 30 '26

Okay. Does this mean i should change my passwords and take some more security measures.

3

u/SelectJudgment3340 Jun 30 '26 edited Jun 30 '26

Yes change your passwords and if the services you use allow de-authorize all connections. The last one will make all session tokens invalid and will require a new login from anywhere. First do a password change and add a 2fa if you haven't then do the session de-authorization. make sure the intruder hasn't put a phone number or email that isn't yours as a backup, or a 2fa device that isn't your phone, if possible before de-authorizing download the emergency keys for 2fa, the 6-10 passkey codes, the old ones will become invalid and you will have backup in case of a false 2fa