Another wave of hacked Yahoo/Xtra mail accounts?

Forums › Spark New Zealand (including Skinny and BigPipe) › Another wave of hacked Yahoo/Xtra mail accounts?

1 | 2 | 3 | 4 | 5

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#945378 4-Dec-2013 14:25

ps2jak2: The way I did it was to say I forgot my password at the http://xtramail.co.nz site as changing the password the normal way didn't work for me either.

I have a "master" email address which is (was? maybe they have changed) a work around for Telecom line numbers, I had to logon with that email to set my password.

scuwp

3885 posts

Uber Geek

#945380 4-Dec-2013 14:31

I also could not change the password using the on-line process. Had to ring up. Surprisingly got through to a CSR in only a couple of minutes and it was all sorted. I did ask them to completely disable the email account which they did. He thanked me for being so polite about it, said they were getting terrible abuse from customers.

Hellooooo Gmail :-)

Lazy is such an ugly word, I prefer to call it selective participation

plambrechtsen

1948 posts

Uber Geek
Inactive user

#946059 5-Dec-2013 13:28

lyonrouge:
ps2jak2: The way I did it was to say I forgot my password at the http://xtramail.co.nz site as changing the password the normal way didn't work for me either.

I have a "master" email address which is (was? maybe they have changed) a work around for Telecom line numbers, I had to logon with that email to set my password.

Yep.. You need to login to the password change portal here: http://www.telecom.co.nz/changepassword using your primary account name. And for some long standing customers that is a xtr... with some numbers attached on the end and not the email address you use. That legacy account number still persists even if you have created an alias.

loveshack2138

2 posts

Wannabe Geek

#946247 5-Dec-2013 20:36

I had email problem last time/months ago with xtra, changed password as instructed, with an extra long one, since then I have not actually logged into xtra mail, I use windows mail send/recieve all my email, and luckily this time no problems with xtra mail, fingers crossed ah!

ps2jak2

54 posts

Master Geek

ID Verified

Subscriber

#946265 5-Dec-2013 21:16

plambrechtsen:
lyonrouge:
ps2jak2: The way I did it was to say I forgot my password at the http://xtramail.co.nz site as changing the password the normal way didn't work for me either.

I have a "master" email address which is (was? maybe they have changed) a work around for Telecom line numbers, I had to logon with that email to set my password.

Yep.. You need to login to the password change portal here: http://www.telecom.co.nz/changepassword using your primary account name. And for some long standing customers that is a xtr... with some numbers attached on the end and not the email address you use. That legacy account number still persists even if you have created an alias.

The xtra mail link I posted was something I found in Telecom's own help pages under "how to change your password" or there about which I came across via a link provided by yahoo NZ and so it was probably hopelessly out of date although the change password screen I ended up with was basically exactly like the telecom.co.nz one bar it asking me for the security question because of the "forgotten password". I will use the telecom link if anyone else asks me for help mind as it appears to be the proper way to do it.

As a side note just for anyone who's interested, the account I sorted out was from about 1998 and just has an @xtra.co.nz email as it's username for everything - never had to use a number to login anywhere when helping the owner.

mattwnz

20147 posts

Uber Geek

#946286 5-Dec-2013 21:56

Does yahoo locking accounts also wipe domain based email addresses that have been granted permission to send over the extra SMTP server? I haven't been able to send email since mine got locked even though I have updated the outgoing password with the new one.

savaii

54 posts

Master Geek

#946540 6-Dec-2013 12:45

mattwnz: Does yahoo locking accounts also wipe domain based email addresses that have been granted permission to send over the extra SMTP server? I haven't been able to send email since mine got locked even though I have updated the outgoing password with the new one.

Locking the account should only prevent access to the email account until the customer rings Telecom to reset the password or succeeds in answering the secret questions online to reset their password. Locking the account doesn't modify any settings. It is possible that the spammer/hacker may have modified the settings while they were sending out their spam emails though, so definitely check those settings are still in place as soon as you're able to log back into Xtra Webmail.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Note that to use Quic Broadband you must be comfortable with configuring your own router.

freitasm

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1022179 9-Apr-2014 13:55

Telecom is not lucky... Just saw this today: Heartbleed bug affects Yahoo! Mail:

UPDATE 3: Because of a major bug in OpenSSL, Yahoo users are advised not to log in to their email and instant messaging accounts, and other services until the bug is fixed.

I am contacting Telecom to see if there's any information from them.

freitasm

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1022298 9-Apr-2014 17:28

Received this from Telecom, relaying a Yahoo message: "A vulnerability, called Heartbleed, was recently identified impacting many platforms that use OpenSSL, including Yahoo's. As soon as we became aware of the issue, we began working to fix it. Our team has successfully made the appropriate corrections across the main Yahoo properties (Yahoo Homepage, Yahoo Search, Yahoo Mail, Yahoo Finance, Yahoo Sports, Yahoo Food, Yahoo Tech, Flickr and Tumblr) and we are working to implement the fix across the rest of our sites right now. We’re focused on providing the most secure experience possible for our users worldwide and are continuously working to protect our users' data."

Ragnor

8219 posts

Uber Geek

Trusted

#1022573 10-Apr-2014 03:17

Telecom's outsourcing of email has really worked well for them.. oh wait.

mattwnz

20147 posts

Uber Geek

#1023572 11-Apr-2014 18:58

I am still getting the login pop up box in outlook, saying that it can't login and reenter my password, most days, and about the same time in the evening. I decided to enable logging with outlook. I don't know if I have captured the right part, but my log is below. It looks like the email service is unavailable. Perhaps too many users accessing it, and it is overloaded? It certainly isn't good that this happens almost every night, but during the day it is fine.

2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): Begin execution
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): ========= Initial blob =========
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): ===================================
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): Port: 995, Secure: SSL, SPA: no
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): Finding host
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): Connecting to host
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): Securing connection
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): Connected to host
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): <rx> +OK hello from popgate-removed pop110.tnz.mail.aue.yahoo.com
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): Authorizing to server
2014.04.11 18:54:35 POP3 (pop3.xtra.co.nz): [tx] CAPA
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> +OK CAPA list follows
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> IMPLEMENTATION popgate-removed
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> XOIP
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> EXPIRE-NEVER
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> PIPELINING
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> RESP-CODES
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> TOP
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> UIDL
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> USER
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> SASL LOGIN PLAIN
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> .
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): [tx] USER *removed*
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): <rx> +OK password required.
2014.04.11 18:54:36 POP3 (pop3.xtra.co.nz): [tx] PASS *****
2014.04.11 18:54:42 POP3 (pop3.xtra.co.nz): <rx> -ERR [SYS/TEMP] (#AUTH701) Service is not available; please try again later.
2014.04.11 18:54:42 POP3 (pop3.xtra.co.nz): Retrying authorization

matisyahu

1623 posts

Uber Geek

Trusted

#1024472 13-Apr-2014 18:52

Ragnor: Telecom's outsourcing of email has really worked well for them.. oh wait.

I honestly can't work out why they went with Yahoo - even if you're not 'young' or 'hip' as a manager you'd think that for the sake of CYOA that they would have gone with a high profile and successful company like Google or even hammer out some deal with Microsoft.

"When the people are being beaten with a stick, they are not much happier if it is called 'the People's Stick'"

1101

3122 posts

Uber Geek

#1025610 15-Apr-2014 14:48

kawaii:
Ragnor: Telecom's outsourcing of email has really worked well for them.. oh wait.

I honestly can't work out why they went with Yahoo - even if you're not 'young' or 'hip' as a manager you'd think that for the sake of CYOA that they would have gone with a high profile and successful company like Google or even hammer out some deal with Microsoft.

Pretty sure they went FROM MS to Yahoo.
Used to be all the same complaints pre-yahoo

1 | 2 | 3 | 4 | 5