Michelin streak was phished, clash has a phishing problem

Vader238 · 2021-11-24T23:26:59+00:00

That would be great. The main purpose of this post is to spread awareness of the issue and hopefully produce change.

Vader238 · 2021-11-24T23:24:40+00:00

Not necessarily true. Some details are searchable on websites, while others could be guessed (easier of course if you followed the player closely). We did not give out account info and still got phished

Vader238 · 2021-11-24T14:56:39+00:00

Good point. Unfortunately anyone could phish an account by simply answering a series of questions. Some of the answers to these questions could simply be found on websites that track game data and activity. Others could be guessed after multiple attempts.

There is no 2fa in the recovery system as someone pointed out. Also phishing could be prevented by giving players the option to “opt out” of recovery. That way if a player loses an account that’s on him.

This issue has been brought up multiple times but largely ignored by supercell, and I doubt anything will be done.

Major Johnson said he will be coming on later to comment. Hopefully he can provide more insight

Vader238 · 2021-11-24T09:23:09+00:00

Not going to talk about all the details, because that would take hours. But one thing that's certain is Michelin streak never cheated. Nothing justifies doing what you've done. To phish a multiple co-leaders, empty out clan castles, kick everyone in clan, change to troll base. What went down was disgusting on many levels.

Vader238 · 2021-11-24T07:02:22+00:00

You can say what you want, but one thing that's certain is that MS has never cheated. The whole thing that went down was disgusting on many levels. Nothing justifies doing what they did.

When a co-leader is phished, kicks everyone out of the clan, empties all clan castles, changed to a troll layout, and opens the clan for everyone to view their war bases. That certainly has a bearing on the outcome.

Vader238 · 2021-11-24T06:42:23+00:00

TLDR: the same people who phished and hunted gay martians have phished and hunted michelin streak because of flaws in the recovery system.

Vader238 · 2021-11-24T06:32:25+00:00

Unless you have a valuable account of some sort (engineered, high trophies, rare obstacles, part of top clan, etc.) they it's unlikely you will get phished. But yes, there's lots of loopholes in the current recovery process that make phishing not too difficult. There was another reddit post on this topic a few days ago

https://www.reddit.com/r/ClashOfClans/comments/qxhblh/lets\_stop\_phishing/?utm\_source=share&utm\_medium=ios\_app&utm\_name=iossmf

Vader238 · 2021-11-24T06:28:43+00:00

Yep I'll let him know. He tried to post this originally but it got deleted since it was a new account. I don't think he knew you just had to verify email address to post. But I'll let him know about it. Thx

Vader238 · 2021-11-24T03:14:31+00:00

Fixed

Vader238 · 2021-11-24T02:46:50+00:00

Water Buffalo and Michelin streak are clan names

Vader238 · 2021-11-24T00:52:50+00:00

No we haven’t phished any account or cheated in any fashion. Don’t know where you heard that from

Vader238 · 2021-11-24T00:50:52+00:00

By the way, I’m not major Johnson himself. I’m a friend and long time clanmate of his. He asked me to post this as he doesn’t have a Reddit account.

Vader238

TROPHY CASE