Hmmm...received an email from LL

Got an email from "no-reply", offering to tell me how to reset my password, on an unused alt account, with an IP address that isn't mine. It looks to me as if someone's trying to hack into the account. Do I just ignore the email or do I file a ticket on it, or what?

definitely contact LL

Unless the email contains specific information that only you and LL would know, like the alt's name, it is almost certainly a phishing attempt to get your valid SL password. Even though SL uses an non-LL email provider, i've never heard of them caring one way or another about unused alt accounts. LL may be interested in the phishing attempt so its probably worthwile opening a support ticket. Include in it the email with its full headers so LL can check where it originated.

The alt's name is in it. It's actually a name I created one day, but I've never once signed it online.

This situation doesn't lend itself easily to a support ticket.

In that case, its likely that it is legit. But since i've never heard of them doing this, it would still be prudent to check with LL to verify the email.

Also, LL might like to know that someone is going around trying to hack accounts. Just tell 'em and change the thing's password to annoy the wannabe hacker even more.

Anybody can hit "I forgot my password", triggering such an email.
Is the name close enough to another, existing account that it could be an honest mistake? -Somebody making a typo in the name, being denied login, and thinking they had forgotten their password, not realizing they were actually trying to log in to somebody else's account.

I've seen it happen with other services, and I go into paranoia overdrive when it does, but it *can* actually be an honest, legit mistake.

The problem with such "use your email to recover access" functionality is that email is typically a fairly vulnerable link in the whole Internet chain, and can be breached or intercepted with comparatively ease.

It sounds like it's just the automated email you get if you click 'Forgot your name or password?' on the login page.

I think it is just an attempt to recover a password...I'm not terribly concerned about the account - as I said, it's never been signed on - but I just wonder why someone would type that name into their browser and try to sign on it. I'll have to look at the list of names to see what last name may be close.

Can you use the chat, Honey?

It sounds dodgy that someone else would know the alt enough to try to access SL ...

I finally muddled my way through a support ticket. We'll see what happens.

how old is that alt? is it possible that LL just sent out a "friendly email" since you hadn't logged in with that account, to help you reclaim it?

Also, if your name was one that was pretty commonish, it's possible that someone was tryng to log into THEIR little-used alt, and forgot what their name was, and was mistakenly trying to log into your account. ("Oh, I forgot yeah I'm not 'Hey Oh'.. I'm 'Hay Oh'"

Sure, keep an eye open for issues, change the password, etc.. but leave a little possibility for being something utterly harmless.