Evernote hack attempt - time to reset your passwords

[Sysman]

They?

http://links.evernote.mkt5371.c*m/blah

Good catch. I checked the source of the one they had sent me in response to my password change and it was legit.

But a later message arrived 10 minutes after I edited my previous post and that one does indeed have the dodgy address. the href="blah" points to the dodgy domain as well.

Despite Evernote claiming they can find no evidence of nicked data, it looks like the email addies were snaffled.

[Pondlife]

Evernote Security Notice: Service-wide Password Reset


Oops. They just sent me an email with a "reset password" request...

They?

http://links.evernote.mkt5371.c*m/blah

[Sysman]

Evernote Security Notice: Service-wide Password Reset

There are also several important steps that you can take to ensure that your data on any site, including Evernote, is secure:

• Avoid using simple passwords based on dictionary words
• Never use the same password on multiple sites or services
• Never click on 'reset password' requests in emails — instead go directly to the service

Oops. They just sent me an email with a "reset password" request...