Widespread Email Compromise at Yahoo/Xtra

Forums › Spark New Zealand (including Skinny and BigPipe) › Widespread Email Compromise at Yahoo/Xtra

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | ... | 13

BDFL - Memuneh
79253 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#759923 12-Feb-2013 10:06

Telecom should tell people NOT to provide passwords over phone to anyone claiming to be with them.

nickb800

2715 posts

Uber Geek

Trusted

#759937 12-Feb-2013 10:21

Is anyone else having trouble changing their email password?

Ive tried it several times - my password & login is accepted when accessing the webmail interface, and again when entering the 'my account' area, but when I use the change password form, it gives me an incorrect username or password error.

P.S. Dont take my geek credentials away, both my family and myself use google mail with custom domains as our primary email account, we just have our old @xtra address diverting into these accounts for stubborn people that wont update our email in their contact books

riahon

946 posts

Ultimate Geek

#759950 12-Feb-2013 10:43

nickb800: Is anyone else having trouble changing their email password?

Ive tried it several times - my password & login is accepted when accessing the webmail interface, and again when entering the 'my account' area, but when I use the change password form, it gives me an incorrect username or password error.

P.S. Dont take my geek credentials away, both my family and myself use google mail with custom domains as our primary email account, we just have our old @xtra address diverting into these accounts for stubborn people that wont update our email in their contact books

In the 'change' form are you putting full email address? I think it just needs the first bit before the @

kemp

12 posts

Geek

#759954 12-Feb-2013 10:54

nickb800: Is anyone else having trouble changing their email password?

Ive tried it several times - my password & login is accepted when accessing the webmail interface, and again when entering the 'my account' area, but when I use the change password form, it gives me an incorrect username or password error.

P.S. Dont take my geek credentials away, both my family and myself use google mail with custom domains as our primary email account, we just have our old @xtra address diverting into these accounts for stubborn people that wont update our email in their contact books

Yes, same problem here. I've been trying to change a password for a frantic parent. Neither with or without the @xtra.co.nz bit is accepted, both get kicked for username or password mismatch.

plambrechtsen

1948 posts

Uber Geek
Inactive user

#759968 12-Feb-2013 11:14

KiwiTT: I have changed my username password on Yahoo, do I also need to change my username.xadsl password as well.

To be honest you shouldn't need your .xadsl account at all anymore. It's from the legacy system and unless you haven't been migrated yet (which a lot of people already have) and have a need for a static IP then you shouldn't need to use the .xadsl account at all anymore.

You shouldn't need to touch your .xadsl account as that won't be impacted.

ajobbins

5052 posts

Uber Geek

Trusted

#759980 12-Feb-2013 11:28

plambrechtsen: Hey everyone, sorry I have been MIA yesterday. Was a tad of a crazy day.

I'll be online a bit more today.

If anyone has any recent spam they got today or late last night ideally could you forward the full email including the headers to our team mailbox ort@telecom.co.nz and I will forward them on.

I got one overnight but from a yahoo.co.nz - is that of interest?

Twitter: ajobbins

plambrechtsen

1948 posts

Uber Geek
Inactive user

#759981 12-Feb-2013 11:29

ajobbins:
plambrechtsen: Hey everyone, sorry I have been MIA yesterday. Was a tad of a crazy day.

I'll be online a bit more today.

If anyone has any recent spam they got today or late last night ideally could you forward the full email including the headers to our team mailbox ort@telecom.co.nz and I will forward them on.

I got one overnight but from a yahoo.co.nz - is that of interest?

Very much so... Full headers as you know, flick me an email pl at telecom, and do you know who the person is? Or just some random?

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

unicorn

16 posts

Geek

#759994 12-Feb-2013 11:44

Hi,
Am seeing alot of info about the spamming and email compromise, but no news on the payload being delivered by the mailicious links?

Any info out there on that to assist people cleaning PC's?

Thanks

catspyjamas

188 posts

Master Geek

#760007 12-Feb-2013 12:22

Hi I'm new here, but saw this thread and may have something useful to add. I've already posted this on a thread in another forum I belong to (pressf1).

So far I haven't been spammed/spammed anyone with either my xtra account or my two yahoo accounts, however I when go to "account info" on all three accounts ("account info" is in the drop down menu underneath your name on top left corner of web mail page) a second tab opens with another login page to verify my password, which is normal when you want to access that area, however this second login page has a warning from NoScript (a script blocking plugin in FF) across the top that says an XSS attempt was filtered from the yahoo mail server. I get the same warning in all three accounts by doing the same thing, only the name of the mail server at mail.yahoo.com being filtered is changed for each of my three accounts (as they're all on different servers). I'm not getting that NoScript warning from any other page on yahoo/yahoo!xtra from what I can tell, including the initial login page.

Yahoo say they've fixed that cross site scripting exploit but NoScript begs to differ. Haven't entered my PW on this second login page to get to my account information, but that's where you have to go in order to change your account info including your PW (as Telecom are recommending their customers do), which maybe explains some of the problems people are having still? Dunno, but am currently waiting for a phone back from Telecom to give them this info in case it's helpful.

nickb800

2715 posts

Uber Geek

Trusted

#760059 12-Feb-2013 13:36

riahon:
nickb800: Is anyone else having trouble changing their email password?

Ive tried it several times - my password & login is accepted when accessing the webmail interface, and again when entering the 'my account' area, but when I use the change password form, it gives me an incorrect username or password error.

P.S. Dont take my geek credentials away, both my family and myself use google mail with custom domains as our primary email account, we just have our old @xtra address diverting into these accounts for stubborn people that wont update our email in their contact books

In the 'change' form are you putting full email address? I think it just needs the first bit before the @

Have tried both, no dice

Skolink

1081 posts

Uber Geek

#760074 12-Feb-2013 13:45

The last time Xtra/Yahoo was comprimised, I helped the neigbour change her password, and it was very frustrating to find the correct place to login (in order to change the email password). There seemed to be some diconnection between the Telecom web login and the Yahoo section.
The other problem is that it would not accept passwords longer than 8 characters, despite the page saying otherwise.

mattwnz

20141 posts

Uber Geek

#760076 12-Feb-2013 13:54

Skolink: The last time Xtra/Yahoo was comprimised, I helped the neigbour change her password, and it was very frustrating to find the correct place to login (in order to change the email password). There seemed to be some diconnection between the Telecom web login and the Yahoo section.
The other problem is that it would not accept passwords longer than 8 characters, despite the page saying otherwise.

According to the telecom head, you need to update the password once a month, so they need to make it a simple process. I agree that it isn't the easiest process at the moment to change it. This is why I think a forced prompt once a month in the webmail system to change the password, like some banks do, is a good idea.

nickb800

2715 posts

Uber Geek

Trusted

#760085 12-Feb-2013 14:03

kemp:
nickb800: Is anyone else having trouble changing their email password?

Ive tried it several times - my password & login is accepted when accessing the webmail interface, and again when entering the 'my account' area, but when I use the change password form, it gives me an incorrect username or password error.

P.S. Dont take my geek credentials away, both my family and myself use google mail with custom domains as our primary email account, we just have our old @xtra address diverting into these accounts for stubborn people that wont update our email in their contact books

Yes, same problem here. I've been trying to change a password for a frantic parent. Neither with or without the @xtra.co.nz bit is accepted, both get kicked for username or password mismatch.

So thats two of us that can't, has anyone successfully changed their password?

I feel like a bit of an idiot, because the odds are that it is a user error/mistype but Ive tried it a few times and im pretty sure entering it right.

plambrechtsen

1948 posts

Uber Geek
Inactive user

#760087 12-Feb-2013 14:05

If you go to: http://www.telecom.co.nz/changepassword

You can change your password.

Just put in your username without the @xtra.co.nz

If you're having problems you can email me pl @ telecom.co.nz and I can find out what's going on. However the change password server is a tad busy today.

If anyone else does have any recent spam would love to get headers forwarded to me.

freitasm

BDFL - Memuneh
79253 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#760088 12-Feb-2013 14:09

Telecom press release right now saying they are starting a review of their email service. Will post details later.

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | ... | 13