Has Xtra email been breached again?

Forums › Spark New Zealand (including Skinny and BigPipe) › Has Xtra email been breached again?

1 | 2 | 3 | 4 | 5 | 6 | 7

5288 posts

Uber Geek

#795722 9-Apr-2013 16:36

kiwigeek1: I can understand some sites with payment processor refusing to change email directly for security reasons but im sure dx.com will let you change it if contact them?

dx.com don't allow email changes. Nor do they allow you to transfer points to a new email address.

Another difficult place to change email address is Sky TV -- they make you do it by phone, despite having an online account management system.

MightyApe

You will find anything you want at MightyApe (affiliate link).

BlakJak

1097 posts

Uber Geek

Trusted

#795753 9-Apr-2013 17:42

"Me Too". I just got a spam from an xtra.co.nz address, but the HTTP POST came from a .vn ISP, relayed by Yahoo. I happen to know the sender address belongs to a resident of the Waikato. Sigh.

No signature to see here, move along...

jeffnz

2870 posts

Uber Geek

Trusted

Lifetime subscriber

#795755 9-Apr-2013 17:48

got 2 emails and now Outlook on my home PC is asking me to confirm password as it doesn't recognise it as does my phone now.

Galaxy S10

Garmin Fenix 5

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#795757 9-Apr-2013 17:54

welcome to the world of yahooxtra mail issues

so does your fault clear if login via webpage email for about 5 minutes.. I havent timed it
but seems to be about that time.. without changing password or a thing like.?

im forwarding email inbox to gmail but left the imap to check spam folder so i can see
if the fault ever clears

Notification Voice: 3.0.0.0

--- Error ---
rem-xtra1SPAMfolder [1000: IMAP] ['imap.mail.yahoo.com ' (port: 993)] [SSL: 1]
Login Error ([AUTHENTICATIONFAILED] Incorrect username or password.)

plambrechtsen

1948 posts

Uber Geek
Inactive user

#795758 9-Apr-2013 17:55

Please.. any emails you can forward including headers is very helpful.

ajobbins

5050 posts

Uber Geek

Trusted

#795759 9-Apr-2013 17:56

Got one this afternoon as well, but from a yahoo.co.nz

Will forward with headers when I get home PL (No gmail access here and can't send with headers easily via mobile devices).

Twitter: ajobbins

plambrechtsen

1948 posts

Uber Geek
Inactive user

#795761 9-Apr-2013 17:59

ajobbins: Got one this afternoon as well, but from a yahoo.co.nz

Will forward with headers when I get home PL (No gmail access here and can't send with headers easily via mobile devices).

Cheers matey.. really appreciate it :)

Believe me this has already been escalated to Yahoo but more examples always help. Especially from non xtra domains. ;)

jeffnz

2870 posts

Uber Geek

Trusted

Lifetime subscriber

#795762 9-Apr-2013 18:07

ok well changed password and seems ok for moment.

Peter I sent headers through to you hopefully they got there.

Galaxy S10

Garmin Fenix 5

jeffnz

2870 posts

Uber Geek

Trusted

Lifetime subscriber

#795821 9-Apr-2013 20:16

"Apr 09, 2013
Telecom network status

Email Service: Possible Spam Issue

We are aware of a small number of incidents where customers have received spam through their Yahoo! Xtra email account. At this point we’re not sure of the extent of the problem and so we are working with Yahoo! to investigate.
We advise any customers who have received mail that they believe is spam, even from a known contact, to delete immediately and never to click on suspicious links contained within emails.
We also advise customers who’ve been affected to change their password - guidance on how to do so can be found at www.telecom.co.nz/changepassword"

hmm interesting they say its only a spam issue, basically I can't login to my email, have reset password 3 times now so think its more than spam

Galaxy S10

Garmin Fenix 5

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#795828 9-Apr-2013 20:29

the pop.imap auth problem has been happening on random acounts for some time now
since the main spam attack.. changing password doesnt resolve the auth problem

it first happened on the main xtra account and they passed after a day and now
its happening on the sub accounts but thats been going for weeks now

the new spam might be cos they bruteforced via pop on weak passwords perhaps and so some
have been breached who knows. it may be once they have found your password they stop the
cracking on that account and hence the pop3 block goes away completely but then they have a password
to use your account any time?

but I did read week ago many apple users having the auth problem and a tech admitted there
was a issue with some account on their auth server and had to be manually cleared

for now the only way around it is webmail.. via browser.. which in turn also unblocks the pop3 access

mobiusnz

393 posts

Ultimate Geek

#795852 9-Apr-2013 21:26

I have to say I really don't know why anyone would persevere with an @xtra email address. If you don't want to personalize with your own domain then get a gmail address - Its easier, far more reliable, you won't either lose it or pay for it if you switch ISP, amazing spam prevention, great smartphone integration (Excluding their nasty decision to drop Activesync support soon) etc etc. Even if you never use the webmail and stick to pop and smtp you can keep a copy of every email you send and receive only for a hell of a long time before the mailbox will start filling up.

I personally think any business should have their own domain so regardless of who you use to host it you keep the same email address and even home users should think about it - I run a business and have my own domain for that and also a family domain name. It was even better when people could get a free 25 user (and later 10, now zero) Google apps for business account but those days are gone (I wonder when they'll make us pay for gmail - another reason to get your own domain so you never lose the address). Many domain registrars offer very cheap email options, if you register a .com domain many US registrars offer free email.

I think NZ Isp's should give up the old free throw away email address with a connection, let home users use Hotmail / Gmail etc etc and focus on reliable, trustworthy relay servers for business (Another place Xtra let their users down).

I'm not really a google fanboy, not liking some of their recent decisions at all, ditch Activesync and give users a good reason to get a free outlook.com address instead, make people pay even for less than 10 users for apps for business and price it around the same as hosted exchange with Microsoft Office 365 and again you are pushing users back to Microsoft. Personally I think Google have done some dumb things lately in what I see as trying to sway people away from Microsoft based phones to Android.

Anyway - enough ranting - Was only going to be a quick comment to advise users to ditch Xtra as your email address but yeah - I've seen a swag of the xtra addressed emails with only a URL coming through our spam filter today.

Matt Beechey

Mobius Network Solutions

kjfj

1 post

Wannabe Geek

#795859 9-Apr-2013 21:38

Speaking as a typical recipient of these spam emails (three today from legitimate contacts), I'm utterly sick of receiving them and having to make sure I re-explain to my partner and kids NOT to click on these email links from people they know on Xtra.

Telecom, PLEASE get this sorted out so that those of us who have chosen not to be part of the Telecom/Xtra community are not continually punished for this decision!

Yours in frustration

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#795865 9-Apr-2013 21:53

yeh I never click strange links nor getting spam to or from my account its just the pop keeps doing auth error
which I said 2 weeks ago i feel another attack is going on it maybe not via strange links this time

if your a hacker wouldnt you just pick a few accounts to attack
so not to alert admin or too many people about it .. no one listens to a few
people complaining about weird access errors after all

mattwnz

19389 posts

Uber Geek

#795866 9-Apr-2013 21:54

Pretty bad timing considering they only just released a press release to say they would be sticking with yahoo.
Interesting that the one I got from an xtra address came from [83.149.48.27] by web96108.mail.aue.yahoo.com which appears to trace back to the US, but aren't yahoos server that xtra use based in Oz not the US.
Will forward the header to plambrechtsen

Haven't had any problems at all with my xtra email address.

mercutio

1387 posts

Uber Geek

#795869 9-Apr-2013 22:00

i got some spam from broadband@telecom-email.co.nz is this the same thing?

1 | 2 | 3 | 4 | 5 | 6 | 7