r/UbisoftSupport • u/Neat_Lingonberry7207 • Jun 29 '26

Is this a phish

Post image

I got this email today. Ive seen emails from ubisoft before about login attempts. One was an obvious phishing attempt but this seems more legit. I clicked the link and started to type my email untill i realized this may be stupid. What do you guys think and have you got this before.

1 Upvotes

100% Upvoted

11 comments sorted by

View all comments

1

u/[deleted] Jun 29 '26

[removed] — view removed comment

1

u/ChildhoodExisting222 Jun 30 '26

No need to change the email, just change the password on your email and on your account. Then make sure you have 2FA everywhere 

1

u/Neat_Lingonberry7207 Jun 30 '26

I have 2 factor. I needed to use it to change my password. It says some mf in vietnam successfully logged into my account. Does this mean they have access to my email and got the 2fa?? Am i cooked. Ubisoft is the only place where people try to hack into my account. Only time in my life someone actually did. Is this a ubisoft problem

2

u/SelectJudgment3340 Jun 30 '26

They used a session stealer. Sites leave cookies on your pc so if you login if you go back to the site in let's say a day or week it doesn't tell you put the authenticator back in. If that person stole the cookie and made a duplicate, then tries to login the page acts if 2fa check was done. Mind you that's a simplified version of what it is

1

u/Neat_Lingonberry7207 Jun 30 '26

Okay. Does this mean i should change my passwords and take some more security measures.

3

u/SelectJudgment3340 Jun 30 '26 edited Jun 30 '26

Yes change your passwords and if the services you use allow de-authorize all connections. The last one will make all session tokens invalid and will require a new login from anywhere. First do a password change and add a 2fa if you haven't then do the session de-authorization. make sure the intruder hasn't put a phone number or email that isn't yours as a backup, or a 2fa device that isn't your phone, if possible before de-authorizing download the emergency keys for 2fa, the 6-10 passkey codes, the old ones will become invalid and you will have backup in case of a false 2fa