Hey (link to spammed site)
Name of actual Xtra account holder
Some of these spams come from people I know, others are from addresses used in TradeMe transactions. In each case the spams have been sent to multiple users from the account holder's address book, suggesting that these are hijacked Xtra accounts rather than someone spoofing addresses. The sheer number of spams using different Xtra accounts implies that this could be a large-scale hack. Here are two related stories - both contain quotes from Yahoo saying the problem has been fixed. Yeah, right!
http://thenextweb.com/insider/2013/01/07/yahoo-mail-users-hit-by-widespread-hacking-xss-exploit-seemingly-to-blame/
http://thenextweb.com/insider/2013/01/08/researchers-say-yahoo-mail-exploit-still-active-despite-claim-of-being-fixed/
The second link contains an embedded video showing just how frightening easy it is to steal any Yahoo (or Xtra) user's credentials.
Has anyone else noticed this increase in Xtra spam?
Finally, here's how to re-secure a hacked Xtra/Yahoo email account
http://telecom.custhelp.com/app/answers/detail/a_id/26203/~/resecuring-hacked-yahoo!new-zealand-accounts
Administrator
Trusted
Geekzone
