Interesting behavior VKontakte

Question

In contact with

Yesterday, the girl's password for VKontakte stopped working. Restored access via mob. telephone. They shrugged. I sit down at my laptop. A similar situation. Restoring access via mobile phone. An unlock code arrives. I bring it in. I immediately become an authorized user and get a modal window asking me to enter a new password. BUT. The password input field does not hide the entered characters. That is, simply input type = text is used, which is accompanied by an assessment of the complexity of the entered password.

I rechecked the hosts, ran the hard drive with Kaspersky. Purely.

I enter a new password. Writes, they say saved, everything is ok.

In the morning I go on a working machine (chrome under the same account). The situation is repeating itself. It raises suspicions of at least some kind of phishing.

Just in case, I wrote to support.

Answer 1

hosts check. Or proxy in browser settings.

Answer 2

Chrome browser, synchronization via Google account, malware in extensions, no?

Answer 3

DNS is not fake registered?

Answer 4

When I recently tied the phone, the password was also entered in clear text there. Apparently, that's how they intended it.

Answer 5

Waiting for those reply. support.

Answer 6

In such cases, I always check the account activity statistics: in the settings, the “Security of your page” section -> “View activity history”. At least it's calming.