Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.



365 posts

Ultimate Geek
+1 received by user: 16

Subscriber

Topic # 136532 30-Nov-2013 12:18 4 people support this post Send private message quote this post

I've just received spam messages apparently from two friends with xtra addresses, who clearly didn't send them knowingly.

There were also several additional people placed in the To: field that could only have been extracted from their Yahoo/Xtra webmail address book.

The subject fields had  "FW" and the second one "Hey", and both of them simply contained a link (twice) to a miracle green coffee bean that reduces weight.

Both links were different but went to the same page.

http://aristonkombiservis.com/kqcb/sdjijgydnmbzfajzaaduytvb.kiumrgqxnop
http://property-agent.com/ffls/uifyw.html which also pushes these green beans.

These look very similar to what was happening much earlier in the year, when Yahoo's email passwords were hacked. I'm guessing some of these passwords have been kept for further attacks or the same vulnerability still exists?

Obviously I've encouraged these people to change their passwords again.  XTRA really should change to another email provider. I believe BT left them behind after the previous attack.
 
I can forward headers by PM if required.

Edit: I've just had a third email as bove from a distant family member: http://qantasformula1promo.com/bzahq/gyoryd.html
This also takes you to the evil green coffee beans.

View this topic in a long page with up to 500 replies per page Watch this topic Create new topic
 1 | 2 | 3 | 4 | 5
990 posts

Ultimate Geek
+1 received by user: 98


  Reply # 943379 30-Nov-2013 12:56 2 people support this post Send private message quote this post

i got some this morning also, seems yahoo mail isn't the best fit for Telecom giving them problem after problem after problem :|





5902 posts

Uber Geek
+1 received by user: 74

Trusted
Subscriber

  Reply # 943432 30-Nov-2013 16:31 Send private message quote this post

Hi, had a bunch of these come through this morning.

Cyril

1088 posts

Uber Geek
+1 received by user: 31


  Reply # 943434 30-Nov-2013 16:35 quote this post

Funnily enough I got an email yesterday that I thought was spam that said that access to my yahoo mail account (that I dont use very much) had been detected from the states.

I can still access the account - so the password hasnt been hacked - but sounds like yahoo have been targeted recently.




-----------------------------------------------------------------------------------------------
Nothing is impossible for the man who doesn't have to do it it himself - A. H. Weiler

1334 posts

Uber Geek
+1 received by user: 161


  Reply # 943436 30-Nov-2013 16:39 Send private message quote this post

Spong: I've just received spam messages apparently from two friends with xtra addresses, who clearly didn't send them knowingly.

There were also several additional people placed in the To: field that could only have been extracted from their Yahoo/Xtra webmail address book.

The subject fields had  "FW" and the second one "Hey", and both of them simply contained a link (twice) to a miracle green coffee bean that reduces weight.

Both links were different but went to the same page.

http://aristonkombiservis.com/kqcb/sdjijgydnmbzfajzaaduytvb.kiumrgqxnop
http://property-agent.com/ffls/uifyw.html which also pushes these green beans.

These look very similar to what was happening much earlier in the year, when Yahoo's email passwords were hacked. I'm guessing some of these passwords have been kept for further attacks or the same vulnerability still exists?

Obviously I've encouraged these people to change their passwords again.  XTRA really should change to another email provider. I believe BT left them behind after the previous attack.
 
I can forward headers by PM if required.

Edit: I've just had a third email as bove from a distant family member: http://qantasformula1promo.com/bzahq/gyoryd.html
This also takes you to the evil green coffee beans.



me too.

581 posts

Ultimate Geek
+1 received by user: 32

Subscriber

  Reply # 943437 30-Nov-2013 16:42 Send private message quote this post

A friend got one yesterday from one of our mutual friends. Haven't got one myself yet!

Just looked in my spam folder and there is a 'stranded in Manila - please send money' one from a gmail account!

Gonna be hard to find an email provider if we have to close all xtra and gmail accounts!

2853 posts

Uber Geek
+1 received by user: 131

Trusted
Subscriber

  Reply # 943446 30-Nov-2013 17:07 Send private message quote this post

Yup just finished changing the password of someone I'm staying with. They are accessing from 6 different devices and alongside the hacking I can't convince them to switch to a proper mail provider with activesync :facepalm:





6081 posts

Uber Geek
+1 received by user: 207


  Reply # 943457 30-Nov-2013 17:36 Send private message quote this post

Zeon: Yup just finished changing the password of someone I'm staying with. They are accessing from 6 different devices and alongside the hacking I can't convince them to switch to a proper mail provider with activesync :facepalm:


People don't want to pay for something they can get for free. Think about how much your time would have cost them though, so it is false economy.

376 posts

Ultimate Geek
+1 received by user: 37


  Reply # 943485 30-Nov-2013 19:26 Send private message quote this post

Yup I got one of these this morning, and thought the same thing as the OP. Nice to see it 'confirmed' here (that other people have noticed it too).
Lets grab the popcorn and see what happens this time around.

BDFL
47899 posts

Uber Geek
+1 received by user: 3536

Administrator
Trusted
Geekzone
Subscriber

  Reply # 943513 30-Nov-2013 21:07 Send private message quote this post






10122 posts

Uber Geek
+1 received by user: 266

Trusted
Subscriber

  Reply # 943517 30-Nov-2013 21:19 One person supports this post Send private message quote this post

Mums long unused yahoo account got the same notification about a login this morning.




Richard rich.ms

Phil Gale
1094 posts

Uber Geek
+1 received by user: 37

Trusted
Red Jungle
Subscriber

  Reply # 943608 1-Dec-2013 09:30 2 people support this post Send private message quote this post

Yup, had a bunch the last couple of days.. Well past time to ditch Yahoo.




Red Jungle: we make fantastic software

RSS  Twitter  Facebook  Skype

283 posts

Ultimate Geek
+1 received by user: 3

Trusted

  Reply # 943643 1-Dec-2013 11:01 2 people support this post Send private message quote this post

Yeap me too - and I am paranoid about security - Have Windows 8.1 and Browser totally locked down with highly complex 17 character long password that cant be bruteforced. So it annoys me when my primary home account is been hacked at the server end.

Soo annoyed - as when I got the first wave of bounces, I tried to reset the password via the Telecom Automated screens - but they both rejecting my credentials / account numbers.

Of course I rang Telecom helpdesk - and the message said 1 hour waiting time - 90 minutes later - I am still on hold to change my password!!

The biggest and stupidest thing Telecom ever did - Dump MSN and replace it with crappy Yahoo.




Tim M, Auckland
Blog: http://paddler.co.nz





39 posts

Geek
+1 received by user: 17


  Reply # 943652 1-Dec-2013 11:20 One person supports this post Send private message quote this post

I received a couple yesterday... three this morning. It feels like the Xtra / spam floodgates are about to open again as they did earlier in the year.

752 posts

Ultimate Geek
+1 received by user: 15


  Reply # 943658 1-Dec-2013 11:40 One person supports this post Send private message quote this post

Same here - didn't realise it until I noticed what was common about the emails I received were from women with xtra and yahoo accounts. hmmm....

1873 posts

Uber Geek
+1 received by user: 13

Trusted
Subscriber

  Reply # 943702 1-Dec-2013 14:51 One person supports this post Send private message quote this post

I don't think I've been hacked but I went to change the password anyway but the site it not accepted current passwords either, wouldn't it be nice if we could have email portability like number port?

 1 | 2 | 3 | 4 | 5
View this topic in a long page with up to 500 replies per page Watch this topic Create new topic








Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Forms of government for New Zealand
Created by charsleysa, last reply by Sidestep on 16-Apr-2014 16:54 (65 replies)
Pages... 3 4 5


why does the tax payer have to pay for the prince and princess' 6 star holiday?
Created by joker97, last reply by Lazarui on 16-Apr-2014 12:56 (66 replies)
Pages... 3 4 5


Business vs Residential UFB, why the huge difference in cost??
Created by dman, last reply by pchs on 16-Apr-2014 16:22 (21 replies)
Pages... 2


Problem with NDSCam
Created by haydenmarsh, last reply by Benoire on 14-Apr-2014 21:28 (21 replies)
Pages... 2


MH370 - Call for Search & Rescue Help
Created by DS248, last reply by Sideface on 15-Apr-2014 16:40 (734 replies)
Pages... 47 48 49


True cost of driving ..
Created by rayonline, last reply by alasta on 14-Apr-2014 20:43 (52 replies)
Pages... 2 3 4


Why is there a lack of ultraportables with Intel Iris graphics?
Created by d3Xt3r, last reply by wasabi2k on 14-Apr-2014 13:21 (32 replies)
Pages... 2 3


Help ! Home business connection and VDSL dead. yikes.
Created by Scotsman, last reply by FireEngine on 16-Apr-2014 19:59 (15 replies)


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.