Qantas FF attempted hacking of account?

[PLANT]

Hi all,

It's anyone else getting more verification sms's more frequently when they are not looking at their Qantas account?

Seem too have my points in tack.
Not sure if some twit keeps entering wrong FF with same name..... But getting a large number of SMS with codes to verify my QFF account

 

[NoGodsOneQueen]

I had a run of this a few weeks back over a period of about 48 hours. If it was a hack attempt they were unsuccessful.

 

[AIRwin]

Best to change your PIN if you haven't already...

 

[jgm]

I have had 2 emails in the last 2 days. Both were fishing attempts and had subject lines about points, but neither was from a qantas.com origin. I clicked on one of the links to check it out, & it took me to a qanlas.com site. I'm amazed that anyone could be caught by amateur tricks like these, and can only surmise that people never check the headers of their emails.

 

[AIRwin]

I clicked on one of the links to check it out, & it took me to a qanlas.com site.

This?
http://qanlas.com/frequent-flyer/1996eeca152ba51ce640e911228964d6/login/?

 

[Doug_Westcott]

Hi all,

It's anyone else getting more verification sms's more frequently when they are not looking at their Qantas account?

Do you have Award Wallet or Tripit Pro or some other App with the option to monitor your QFF points turned on? If so every time that App checks your points balance it will generate that SMS

 

[DC3]

Happens to me at least once per week. Probably Award Wallet. Nothing untoward.

 

[PLANT]

We have a winner.... Must be Award Wallet?

 

[Oneworldplus2]

It's anyone else getting more verification sms's more frequently when they are not looking at their Qantas account?

Have had lots of SMS verification codes sent to me the last few weeks. Called QF, they said not to worry about it. Would be better if QF did hardware token security (Yubikey)

 

[douglasac10]

We have a winner.... Must be Award Wallet?

That was what was causing it for me.

Would be better if QF did hardware token security (Yubikey)

I mean, even supporting TOTP so you can use Google Authenticator\Authy\etc. would be a good idea.

So would implementing actual passwords so there was more than 10000 possible combinations for passwords, for that matter (I'm assuming they let you have 0000, 1111, etc., I've never tried.)

 

[therudies86]

I was forced to reset my PIN - rang the call centre and they said there was lots of preventative resets occurring at the moment.

 

[Obi-run Kenobi]

It's definitely Award Wallet. The same thing was happening to me and it ceased when I disconnected my AW link.