Jump to content

Phished : Yahoo, Gmail and Hotmail all compromised


GM
 Share

Recommended Posts

Oh fuckety-fuck. :dave:

 

]Microsoft confirmed yesterday evening that the popular web email service, Hotmail, had been targeted by malicious fraudsters in what is commonly referred to as a phishing scam, tricking users into revealing their credentials at fake websites.

 

Neowin can today reveal that more lists are circulating with genuine account information and that over 20,000 accounts have now been compromised. Non-Hotmail passport accounts have been affected too. A new list contains email accounts for Gmail, Yahoo, Comcast, Earthlink and other third party popular web mail services. It's not clear if this is login information for the service itself or the Microsoft Passport passwords.

 

Microsoft confirmed Neowin's exclusive report yesterday evening and issued a statement on a company blog:

 

"Over the weekend Microsoft learned that several thousand Windows Live Hotmail customer's credentials were exposed on a third-party site due to a likely phishing scheme. Upon learning of the issue, we immediately requested that the credentials be removed and launched an investigation to determine the impact to customers. As part of that investigation, we determined that this was not a breach of internal Microsoft data and initiated our standard process of working to help customers regain control of their accounts."

 

It's clear the lists are the result of a phishing scam and some commenters at Neowin suggest it could be the result of unwitting users sending their credentials to sites that name who has blocked you on popular instant messaging software Windows Live Messenger.

 

Neowin has once again reported the new lists to Microsoft's Security Response Center and can confirm that the lists originated from pastebin.com, a site commonly used by developers to share code snippets. Pastebin owner Paul Dixon confirmed that the site was down for maintenance due to "an unprecedented amount of traffic" after our initial reports. Dixon stated "Pastebin.com is just a fun side project for me, and today it's not fun. It will remain offline all day while I make some further modifications."

 

Update: The phishing attack has spread to Google Mail and Yahoo mail amongst others, we're currently awaiting full confirmation on the number of accounts at each service. BBC News is reporting that Google have confirmed the phishing attack.

 

I've got Yahoo, Gmail and Hotmail. Fuckety fuck.  :frantic: :frantic: :frantic:

Link to post
Share on other sites

If it's a phishing attack it requires at least some carelessness on your part (That's assuming the webmail providers are being honest and it's not an internal leak).  But yeah, I've seen a zip file of hotmail emails and passwords being flashed about today in places so probably best to change passwords... Especially if your hotmail account is linked to things like facebook, paypal etc where you can send a password reset to it.

Link to post
Share on other sites

There was a thing that spread using facebook earlier in the year that I (like a dick) fell for simply because of who it had supposedly been sent to me by. It basically got you to enter your username and password and then emailed itself to some, but not all of your contacts and that seemed to be all it did. As soon as I realised I changed my password and sent emails to everyone it had used my account to contact (the messages were in "Sent") telling them not to click on the link. That's all you need to do, or at least it's all you can do. I'm guessing that these lists might be the result of that.

Link to post
Share on other sites

Just don't be a spaz. Never click a link in an email, or reply to it, unless your 100% sure. Simple as that.

 

I wouldn't. :lol: But the spam filter on my Yahoo account is just shit and occasionally I have accidentally clicked on the wrong email and opened/replied to a spam email...without pressing send of course. So I just figured it's better to be safer rather than sorry...

Link to post
Share on other sites

I never get spam email and have had this Hotmail account over three years. :dontknow:

 

People just need to be more careful about what boxes they tick etc.

 

Maybe they just don't email you because they don't want a reply correcting their grammar.

Link to post
Share on other sites

Guest lankybellwipe

I never get spam email and have had this Hotmail account over three years. :dontknow:

 

People just need to be more careful about what boxes they tick etc.

 

Maybe they just don't email you because they don't want a reply correcting their grammar.

 

 

:lol:

Link to post
Share on other sites

I never get spam email and have had this Hotmail account over three years. :dontknow:

 

People just need to be more careful about what boxes they tick etc.

 

Maybe they just don't email you because they don't want a reply correcting their grammar.

 

I'd be satisfied with that explanation.

Link to post
Share on other sites

I never get spam email and have had this Hotmail account over three years. :dontknow:

 

People just need to be more careful about what websites they visit...

 

Is what you really meant?

Link to post
Share on other sites

I never get spam email and have had this Hotmail account over three years. :dontknow:

 

People just need to be more careful about what websites they visit...

 

Is what you really meant?

 

Other than shopping sites (tick the 'I don't want shite thanks' box), which websites require your email address? :D

Link to post
Share on other sites

I never get spam email and have had this Hotmail account over three years. :dontknow:

 

People just need to be more careful about what websites they visit...

 

Is what you really meant?

 

Other than shopping sites (tick the 'I don't want shite thanks' box), which websites require your email address? :D

 

Same as me, I've barely ever received spam e-mails, and iit strikes me as odd how anyone would ever open any of these e-mails.

Link to post
Share on other sites

I never get spam email and have had this Hotmail account over three years. :dontknow:

 

People just need to be more careful about what websites they visit...

 

Is what you really meant?

 

Other than shopping sites (tick the 'I don't want shite thanks' box), which websites require your email address? :D

 

Same as me, I've barely ever received spam e-mails, and iit strikes me as odd how anyone would ever open any of these e-mails.

 

Maybe they'd like their pen1s enhanced with some herbal v1agra.

Link to post
Share on other sites

genuine question....why do people have so many e-mail addresses ? 2 or 3 fair enough but i know people with double figures.

 

Dodgy fuckers.

 

My facebook always looks like someone else has been in it but thats probably just my girlfriend being a sneaky bitch.

Link to post
Share on other sites

genuine question....why do people have so many e-mail addresses ? 2 or 3 fair enough but i know people with double figures.

 

Dodgy fuckers.

 

My facebook always looks like someone else has been in it but thats probably just my girlfriend being a sneaky bitch.

 

Change your password. She either won't be able to get on or she'll have to admit she doesn't trust you. Or she wasn't going on anyway.

Link to post
Share on other sites

Some guy I went to Uni with's last 4 facebook statuses

 

Richard : I lost 8 1/2 pounds in only 2 weeks with this new pill! visit ExpressColon.net to get your free trial pack! qUD

 

Richard : I'm 8 1/2 pounds lighter thanks to the FREE trial pack of this new colon cleanser that I got! visit ColonCleanerXL.com to get yours! aJo

 

Richard made $177413391955411 today working online! u guys have to check out WorkHomeDream.net to get started too! ntt

 

Richard Is not making a lot of money online, nor enjoying a colon cleansing pill thank you.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...