TEMPORARY SUSPENSION OF ACCOUNT LOGIN VIA EMAIL / PASSWORD

⚠️ Effective from 15:00 on Oct 21, 2026 – expected to last until the end of Dec 2026 

I am ANDY!

I know what you might be thinking: “The title of this announcement sounds really unusual!”

It might sound silly, right? It feels more like a mistake than a carefully considered decision.

But there is no mistake here at all!

This is exactly what we are going to do. A decision that is not easy, but necessary to regain account control for the very miners who fell victim to phishing.

Please spend a few minutes reading through this article so you never lose control of your account ever again!

"YOU HANDED YOUR PASSWORD TO THE THIEVES YOURSELF"

Perhaps you might exclaim “Nonsense! No way!” to object to my statement!

But please slow down for a minute. I want to point out how a seemingly harmless habit can cause you to personally hand over your entire account to thieves.

ARE YOU MAKING MONEY ONLINE (MMO)?

Let's start from the very path of making money on the Internet that many people are pursuing, commonly known by the familiar name MMO (Make Money Online).

Basically, MMO means using the Internet to participate in activities that can generate income. That could be affiliate marketing, providing services, content creation, joining reward programs, or digital asset projects in their development and reward distribution stages.

The Make Money Online (MMO) model has existed for many years. In fact, quite a few people have earned attractive incomes from these opportunities. It is precisely those success stories that inspire you and millions of others to keep participating.

But this is also where a serious security mistake can begin.

Since the early 2020s, the MMO wave became even more popular in the blockchain field as the digital asset market grew rapidly and attracted massive capital investment globally.

During that phase, almost every day, you saw a new project pop up. Projects with low barriers to entry almost free continuously launched Airdrop programs, token tasks, user reward apps... Attracting millions of people rushing to participate, with each person registering for dozens or even hundreds of projects.

With almost zero barrier to entry, millions of participants shared the exact same mindset:

“Better to register by mistake than to miss an opportunity!”

The problem arose not because you joined many projects, but because many people, for momentary convenience, reused a single set of registration info consisting of Username / Email / Password for almost every project they joined.

HOW PHISHERS CAN STEAL YOUR PASSWORD

When participating in many projects, you have to remember a lot of accounts. For convenience, many choose a solution that seems smart but is actually extremely dangerous:

Using the same email, username, and password for almost all projects.

This is precisely when you create a security vulnerability that could lose all your MMO achievements.

FAKE PROJECTS!

Imagine you registered for 100 different projects. If just a few of them are fake websites created to steal login credentials the exact info you used to create identical accounts everywhere.

Phishers often create fake websites with flashy promises of high profits, baiting people who are hastily searching for registration opportunities.

After collecting your email and password, they can try using these credentials to access other services that you might also belong to. If you reuse passwords, a single leak can put multiple accounts at risk.

THE RISKS THAT PERSISTENTLY FOLLOW YOU

The terrifying part is that those fake websites can disappear so fast that you might not even realize it. But the risks you incurred will follow you for a long time.

Attackers do not necessarily steal assets immediately. They can lie low, waiting until the MMO accounts you painstakingly built accumulate enough value before making their move.

RETURNING TO THE AFFIRMATION

“You handed your password to the thieves yourself.”

You realize it now, don't you!

Not because you actively wanted to give your assets to them, but because a habit and weak security awareness caused your login credentials to leak and become a tool for them to use.

If you're reading this and think "I might actually be on the list of victims," then please continue reading, because the next crucial step to prevent damage will be covered below.

HOW RUBI NETWORK IS SOLVING THIS PROBLEM!

Returning to the Rubi Network project – perhaps the pressing question right now is "How many Rubi Network miners are victims?":

The unfortunate answer is “I do not know the exact number.”

We cannot identify all accounts that have suffered login credential leaks simply by observing detected cases. There may still be accounts at risk of unauthorized access where thieves remain hidden and waiting.

LET'S LOOK AT THE SCALE OF THE PROBLEM

At the time of writing this, Rubi Network has about 5.2 million miner accounts.

To visualize the potential scale of this risk, let's estimate by making an illustrative assumption.

Suppose that: If 5% of all accounts had their login credentials leaked using the method we just analyzed, the calculation yields a very serious figure: 5,200,000 × 5% = 260,000 accounts (*)

That is an estimated assumption, but even if the actual number is much lower, it is still a figure that can cause severe consequences.

Thieves do not just steal the victim's assets; they can also use thousands of victim accounts as tools to support criminal activities such as splitting, mixing, and transferring funds back and forth between multiple addresses to make tracking difficult.

THE CONSEQUENCES ARE NOT JUST THE LOST RBL

The damage from a Phishing attack is not merely the stolen assets. It also causes miner trust to collapse, leads to discouragement in the Rubi mining journey, and raises doubts about the entire system's protective capability.

For those who have steadfastly mined for years, that loss can be devastating.

ALL RIGHT – WE WILL SOLVE THIS PROBLEM TOGETHER

The Rubi Team affirms that we will work with the community to solve this problem, starting by correctly identifying the attackers' weak points and choosing effective measures to help victimized miners regain total control.

98% of thieves log in via Email / Password

Observing report data from the login history of thousands of suspected victim accounts shows that 98% of high-frequency login activities were conducted using Email / Password.

And that is precisely their weakest characteristic! We will intervene directly at this weak point to disable their ability to access victim accounts.

And here is how we will do it!

CHANGE OF LOGIN METHOD

Temporarily suspending the Email / Password login method.

This rule takes effect immediately.

• From October 21, 2026: The email / password login method will be temporarily suspended.
• Expected duration: The suspension is expected to last until the end of December 2026, depending on security evaluations and subsequent announcements from the Rubi Team.

This is a somewhat extreme measure, but we believe it will yield immediate results.

We understand that changing the login method may cause inconvenience, but in the current context, account security must be prioritized.

ALTERNATIVE LOGIN METHODS

During the period of restrictions on Email / Password, provided login methods will involve third-party accounts with built-in security, including:

• Login with Google Account ( Ready )
• Login with Apple iCloud ( Ready )
• Login with Meta - Meta ID ( Coming soon )

NEXT SOLUTIONS

Suspending email / password login can be seen as a short-term measure, but our goal is not just to resolve an immediate wave of attacks.

This measure creates the necessary timeframe for us to continue building and perfecting account protection layers, including Face Verification (Face Verif) and other authentication mechanisms within Rubi Network's overall security architecture.

We will keep updating the community regarding the evaluation results on the effectiveness of these changes.

The next security article will focus on instructions to help users protect their accounts through Rubi Network's overall 6-layer security solution.

The goal is to help every miner understand the protective layers, know how to use them, and proactively minimize the risk of losing account control.

A MESSAGE FROM ANDY!

I know that many people have spent a long time mining and accumulating RBL. Nobody wants those efforts stolen just because of entering a password once on a fake website.

The Rubi Team will continue improving the system, deploying necessary protective measures, and maintaining transparent communication regarding important changes. But to sustainably minimize risk!

To keep yourself always safe, Andy calls on you to practice these security habits immediately:

• Do not use the same password across multiple projects.
• Always verify website domain names to avoid accessing fake links.
• Stay vigilant and periodically change your access passwords.

Do not assume you are safe just because your account has never had an issue; always pay attention to protecting your account before thinking about accumulating more assets.

* ⚠️ Note: Estimated figures are merely hypothetical assumptions and do not reflect the exact number of victims.

Best regards,
ANDY & TEAM