Just in case there are some of you who read what I post and don’t understand the concept of phishing, watch out for this shit. Outside of an official Tumblr login page, there should be no reason for the website to ask for your password. If you see this on anyone’s blog, you should let them know and link them here for the short tutorial on how to remove the offending content from their blog.
In the meantime, you can make the overlay go away by providing it with bullshit information like an email in the style of firstname.lastname@example.org and a password like butthairz. It’s also a good idea to try bullshit information if you ever see a login form that looks suspicious. If it accepts the bogus information without question, you know you’ve found a malicious login form.
Removing this from your blog is pretty straightforward:
- Go to your blog’s customization page. For me and this blog it’s http://www.tumblr.com/customize/ohsusquehanna
- Click “Edit HTML”
- Just delete it.
- Change your account’s password.
saudade-and-sonder likes this
Show more notes