Yahooo security update

Forums › Spark New Zealand (including Skinny and BigPipe) › Yahooo security update

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#177070 20-Jul-2015 23:40

Hi

my Dad got a email from yahoo about security update.. asking all sorts
of details like password name and pop servier..

its very odd indeed.. the address had something like nz...mail.yahoo.com

just checking if anyone else has gotten these..

I said dont do anything as it could be a scam

I get him to forward the email to me to look it over more

1 | 2

637 posts

Ultimate Geek
Inactive user

#1348099 20-Jul-2015 23:42

says the team at telecom not spark..

hes sending it now so I can look more at it.

he almost submitted the form.. lucky he got stuck and asked me

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#1348101 20-Jul-2015 23:49

hmmm it looks legit.. whats odd I never got a email for my xtra account

From: The Team at Telecom Sent: Monday, July 20, 2015 10:01 PM To: Subject: From Yahoo!Xtra - Immediate Action Required Hi there, We've upgraded our email security to help prevent misuse of email addresses.This upgrade helps guard against having email addresses used by unauthorised parties : that is, when an email appears to come from one person but is actually sent from someone different (also known as "spoofing").You've received this message because you've recently tried to send an email through Yahoo Xtra Mail from an address that doesn't match any email addresses linked to your account.Unfortunately, because of changes made during our security upgrade, your email has been blocked and hasn't been sent.Action required to ensure you can send emailTo make sure you can still send emails from this address, we'll need you to add your email address to your Yahoo Xtra Mail Account. Once this is completed you'll be able to send email from these addresses again.How to verify your email addressVerifying your email is easy - just follow the step-by-step instructions here.These instructions will show you how to add additional email addresses to your email account using Yahoo Xtra Mail via webmail. It'll take around five minutes to verify each of the email addresses, but will only need to be done once in order to send email again from that address.

link goes to http://www.spark.co.nz/help/internet-email/manage-email/verifying-third-party-email-addresses-in-yahoo-mail

freitasm

BDFL - Memuneh
79289 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1348118 21-Jul-2015 03:55

Tell your dad to not fill the form. Just because an email has a link to a website page it doesn't make it official.

It is still a scam.

Bung

6487 posts

Uber Geek

Subscriber

#1348184 21-Jul-2015 09:14

kiwigeek1: says the team at telecom not spark..

hes sending it now so I can look more at it.

he almost submitted the form.. lucky he got stuck and asked me

What form? He is required to login to Yahoo web mail not send his details elsewhere.

Jase2985

13462 posts

Uber Geek

ID Verified

Lifetime subscriber

#1348187 21-Jul-2015 09:19

when i open that link kaspersky AV shows up and says its a Phishing link

Bung

6487 posts

Uber Geek

Subscriber

#1348247 21-Jul-2015 10:33

Jase2985: when i open that link kaspersky AV shows up and says its a Phishing link

Which link -http://www.spark.co.nz/help/internet-email/manage-email/verifying-third-party-email-addresses-in-yahoo-mail/ ?

Your AV has a problem.

Jase2985

13462 posts

Uber Geek

ID Verified

Lifetime subscriber

#1348251 21-Jul-2015 10:38

Bung:
Jase2985: when i open that link kaspersky AV shows up and says its a Phishing link

Which link -http://www.spark.co.nz/help/internet-email/manage-email/verifying-third-party-email-addresses-in-yahoo-mail/ ?

Your AV has a problem.

i used the link in his post above

it may have been used in the past as a phising link and just not been removed.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

wellygary

8328 posts

Uber Geek

#1348256 21-Jul-2015 10:43

the reply to address is "customerupdate@xtra.co.nz"

Googling it returns nothing. nada.. which is both supportive ( i.e its not an established known fishing addesss) but also suspicious in that it could be any old xtra user, and to be honest all of these customer service addresses should have been "spark-ifed" a long time ago

Any trusted "Sparkers" willing to confirm whether this is a genuine email??

EDIT: On second thought, its phishing,

The process for verifying 3rd party email addresses for Spark's servers, is via a authorisations page on YahooXtra, not a regular email address, ( from memorty when every thing got changes either late last year or early this year)

It is not done by sending information including your password to an email address

Oblivian

7300 posts

Uber Geek

ID Verified

#1348298 21-Jul-2015 11:48

Am I the only one not seeing a request for passwords etc?

It will ask for a PW to log into the controlpanel to configure the whitelist.

This looks like the old response you get from yahoo when you have multiple accounts configured in a client, and not using the respective outgoing domain SMTP address to match the from @domain field. Asking for you to add it to a whitelist to allow it to be sent with different reply-to address via yahoo SMTP

freitasm

BDFL - Memuneh
79289 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1348306 21-Jul-2015 12:00

Regardless it would be poor form to do it this way, even if legit.

Bung

6487 posts

Uber Geek

Subscriber

#1348320 21-Jul-2015 12:25

wellygary:

EDIT: On second thought, its phishing,

The process for verifying 3rd party email addresses for Spark's servers, is via a authorisations page on YahooXtra, not a regular email address, ( from memorty when every thing got changes either late last year or early this year) It is not done by sending information including your password to an email address

Where do you see anything about sending passwords to an email address? I see a link to the Spark help page dealing with 3rd party authorisation after you've logged in to Yahoo Webmail.

wellygary

8328 posts

Uber Geek

#1348326 21-Jul-2015 12:32

Bung:
wellygary:

EDIT: On second thought, its phishing,

The process for verifying 3rd party email addresses for Spark's servers, is via a authorisations page on YahooXtra, not a regular email address, ( from memorty when every thing got changes either late last year or early this year) It is not done by sending information including your password to an email address

Where do you see anything about sending passwords to an email address? I see a link to the Spark help page dealing with 3rd party authorisation after you've logged in to Yahoo Webmail.

The OP talked about :

my Dad got a email from yahoo about security update.. asking all sorts

of details like password name and pop servier..

Its not clear if its the email that asked for these , or the form......

If he's being asked to login to yahooxtra (via a obvious valid link) and change setting there, its probably legit,

If he being asked to do anyhing else via email, then it phishing

Bung

6487 posts

Uber Geek

Subscriber

#1348339 21-Jul-2015 12:58

I think you should start with the 3rd post that has the content of the email.

ghettomaster

387 posts

Ultimate Geek

#1348388 21-Jul-2015 15:20

There's something wrong with Yahoo! when a questionable email like that makes you wonder if it's legit. They're just so backwards!

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#1348399 21-Jul-2015 15:41

after some research.. couldnt find out how it occurred.. they are saying the email address in the accounts settings didnt match what they had as allowed.. his xtra email is all he uses

so that tells me either someone has hacked his email password and tried to use it for spam

or hes got some program on win 8 or trojan lurking that tried to send a email

or its a test email from yahoo

at this stage he only got one warning.. if someone or thing was using it with another email

it should create many of those warnings

but I guess though if they have his email id and password they could login to yahoo and
add the emails they sending from and we wouldnt know unless manually checking it
regularly as I dont think it sends a confirm email saying new emails added

1 | 2