Someone trying to hack my Facebook?

[porina]

Roughly midnight (my time) and again around noon today I got e-mails for Facebook password resetting. The "from" address is a real facebook one, and the links in the e-mail go to the main facebook website. E-mail headers look ok. I don't see anything to suggest it is phishing. I have not received any notifications about new Facebook logins, so the assumption at this point may be that someone is using my e-mail(s) to try and reset Facebook. I have 2FA turned on in Facebook.

 

I consider it not unreasonable that a hacker may just throw random e-mails in and see if any of it works, but I haven't see these e-mails before. The other possible scenario I have in mind is that some other software fault is ongoing and sending out e-mails without request.

 

For now I don't intend to do anything other than monitor the situation. Curious if anyone else is seeing anything unusual?

[boggy77]

I'm having the same thing with my steam account.

[Kanna]

Guess it's just people trying to hijack your account

[Master Disaster]

Have you ran your email through Have I Been Pwned?

[porina]

6 minutes ago, Master Disaster said:

Have you ran your email through Have I Been Pwned?

Just tried it, with two hits. Adobe and Kickstarter. I can't even remember having an Adobe account unless it was for some throwaway use (I think they require an account to access downloads for example). I do know my Kickstarter has a unique password.

 

Again, I got a password recovery e-mail, so all you need to trigger that is to know (or guess) my e-mail. If it were instead a login attempt, that would be different.

[Guest]

You can type in any email & press forgot password and then you can try hacking the email; of you used your email password for other websites they may be trying them to crack your email. 

[Glorious]

Do you have a common email address like it's your name JohnSmith@gmail.com? Someone else with JohnCSmith@gmail.com is trying to log in and forgetting they have the C account. 

 

I would still change your email password just to be safe. 

[porina]

6 hours ago, Glorious said:

Do you have a common email address like it's your name JohnSmith@gmail.com? Someone else with JohnCSmith@gmail.com is trying to log in and forgetting they have the C account. 

 

I would still change your email password just to be safe. 

My e-mail is not related to my real name and somewhat random. I've had no reports of suspicious activity on my primary e-mail provider. I'm less confident about my backup e-mail though, might remove it some time. It may also no longer exist after brexit transition period ends so I should look into it.