HEADS UP, SCAM ALERT.
Today a bunch of new accounts started following me, and when I visited their pages, I got the above image - “Please revalidate your credentials.” This is a phishing attempt.
If the URL is not Tumblr.com, DO NOT EVER enter your username or password. Alert Tumblr Support immediately and block that user.
If it’s a phishing attempt or scam, the URL will be http://[username].tumblr.com/login.
Tumblr will never ask you to “revalidate your credentials” on someones blog or page in the event of adult content. Also, please make sure to look at the upper right-hand corner to make sure. It will say “Follow” and “Dashboard” which is an indicator that this is a phishing account or bot, and not an actual Tumblr login.
Just thought I would give a heads up!
NOTE: If you have already entered your username and password on one of these blogs, CHANGE YOUR PASSWORD IMMEDIATELY.
EDIT: JUNE 25th, 2011
Important additional information in regards to this post.
I’ve been told that the false login page bot/virus will rewrite your Tumblr theme to create another false log-in page, even if you still have access to your account.
Here are step-by-step instructions on what to do if you enter your information into one of these phishing accounts:
1. Change your password IMMEDIATELY.
2. Alert Tumblr Support as soon as possible. Include your Tumblr username and the username of the account that phished yours.
3. If you have successfully recovered your account but your blog and/or theme are still not back to normal, go to “customize your blog” and remove the custom HTML the virus will have placed to overlay your theme.
Thank you to somethingaboutpurple for this information!
Good luck, and keep safe.
Cumplo con informar. Si alguien cayó, que cambie su pass AHORA.
Tumblr NUNCA ha tenido restricción de edad, ya que al registrarse sólo te pregunta 3 cosas: Usuarios, contraseña y correo.