WARNING, AGAIN: Scammers trying to steal resist.ca passwords. Please reset your passwords.
It has come to our attention that unscrupulous persons are trying to steal resist.ca user passwords. They have created a website which looks almost exactly like our mail login page and have sent mail to many of our users asking them to "verify" their passwords by clicking on a link to their fake site. This is known as a "targeted phishing" or "spearphishing" attack. Please read on. You should know by now that we will never, ever, ask you to "verify" your password. Never. If there are ever security issues we need you to know about, we will always ask to you come to http://resist.ca so you know the information you are receiving is genuine.
Riseup.net posted a good description of this attack in 2007: https://www.riseup.net/en/phishing-example-3
There may also have been "brute force" attacks happening on mail users. This means that someone may have tried to "guess" your passwords. Because of this, we strongly advise all users to change all mail, list and web passwords for all resist.ca accounts. You can find more information about how to do that at http://resist.ca/passwords
Why do they want your password? If they can gain access to your email account, they can then use your account to send spam. If they succeed, other mail servers such as Gmail, Hotmail and Yahoo etc, will begin to block email coming from resist.ca thinking that we are spammers. This can cause a disruption to our services. They may have other, possibly political motivated reasons for wanting access to your email. If they get your website password, they could change your content, in an obvious or not so obvious way in order to either malign your organization or simply place links to their products within your site.
*** ALSO NOTE: We have just enabled spam filtering for all mail accounts to try and limit these types of issues - so please start carefully checking your Junk folder to ensure that any of your messages are not being incorrectly labelled as spam. By moving good messages out of the Junk folder, and actual spam and scam messages into it, you can help the spam system to better learn what is spam and what is not. And please do Contact Us if this new feature is causing you any problems.