Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




256 posts

Ultimate Geek


# 178953 20-Aug-2015 14:27
Send private message

We have had many occurrences of spam messages being sent from Spark customers accounts, have found no malicious software on any of the machines but a flood of hundreds of sent messages in the users address book on the Spark webmail website.

Passwords have been changed but this still appears to be happening - This is also happening when these machines are powered off which is another nail in the coffin for the issue being st Spark/Yahoo's end.

Is anyone else experiencing this?







Create new topic
3155 posts

Uber Geek

Subscriber

  # 1371018 20-Aug-2015 17:55
Send private message

We just had a customer come in yesterday with the same issue.
Spam emails appearing in their Sent Items on the Spark/Yahoo webmail site.
We checked their computer out and no malicious software and they had also changed their password more than once and the emails kept appearing.

We didn't see it happen while we worked on the job and the customer had also gone through and deleted all of the emails so we couldn't check headers or anything like that.

 
 
 
 


15100 posts

Uber Geek


  # 1371035 20-Aug-2015 18:25
Send private message

If it is sent via outlook using SMTP, would it go into the sent folder in webmail? If not, then I presume that the only way they could access it is via webmail, or a hole in their email system.

1384 posts

Uber Geek


  # 1371075 20-Aug-2015 19:46
Send private message

Access should be logged here:
https://api.login.yahoo.com/login/history 



256 posts

Ultimate Geek


  # 1371124 20-Aug-2015 20:51
Send private message

freitasm: Are emails in the Sent folder or just bouncing back? 


Yup, Both







256 posts

Ultimate Geek


  # 1371301 21-Aug-2015 08:40
Send private message

Yep a bunch of browser logins from Egypt and Ukraine starting from early in the morning of 18th.





424 posts

Ultimate Geek

Subscriber

  # 1371306 21-Aug-2015 08:50
One person supports this post
Send private message

Is this a business?  If so, why are they using Yahoo for e-mail?  Use Office 365.

 
 
 
 




256 posts

Ultimate Geek


  # 1371309 21-Aug-2015 09:00
Send private message

This has occurred with 3 seperate customers thus far and counting... And they are just customers that we know of...





BDFL - Memuneh
64434 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 1371328 21-Aug-2015 09:32
Send private message

No relation between those customers? Not just a phishing scam, malware keylogger, etc, etc?

It could be something localised instead of a wide spread hack - just trying to figure out the scale and probability of one versus another.







256 posts

Ultimate Geek


  # 1371333 21-Aug-2015 09:41
Send private message

freitasm: No relation between those customers? Not just a phishing scam, malware keylogger, etc, etc?

It could be something localised instead of a wide spread hack - just trying to figure out the scale and probability of one versus another.



Good thought!

I have had a look through the one customers address book I have access to, no reference to any of the previously affected customers. No connection between them either. Weird.

This activity had stopped since passwords have been changed at Spark.





BDFL - Memuneh
64434 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 1371336 21-Aug-2015 09:44
Send private message

I'm inclined to say your customers were not so strict about sharing passwords/entering passwords.

I have a very old Yahoo! (non Xtra) account and I have SMS 2FA enabled for it - perhaps an option for your customers to increase security, if this is available to Yahoo!Xtra accounts as well?






2538 posts

Uber Geek

Subscriber

  # 1371338 21-Aug-2015 09:50
2 people support this post
Send private message

I have an Xtra mail account, that is about 20 years old, and so far have not been affected by any of the so-called hacks and breaches in terms of people gaining access to the account. Perhaps it's because my password is not Password123 ? ;)

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Bitcoin.com announces partnership with smartphone manufacturer HTC
Posted 16-Sep-2019 21:30


Finalists Announced for Microsoft NZ Partner Awards
Posted 16-Sep-2019 19:37


OPPO Showcases New CameraX Capabilities at Google Developer Days China 2019
Posted 15-Sep-2019 12:42


New Zealand PC Market returns to growth
Posted 15-Sep-2019 12:24


Home sensor charity director speaks about the preventable death which drives her to push for healthy homes
Posted 11-Sep-2019 08:46


Te ao Maori Minecraft world set to inspire Kiwi students
Posted 11-Sep-2019 08:43


Research reveals The Power of Games in New Zealand
Posted 11-Sep-2019 08:40


Ring Door View Cam now available in New Zealand
Posted 11-Sep-2019 08:38


Vodafone NZ to create X Squad
Posted 10-Sep-2019 10:25


Huawei nova 5T to be available 20th September
Posted 5-Sep-2019 11:55


Kogan.com launches prepay challenger brand Kogan Mobile in New Zealand
Posted 3-Sep-2019 11:42


Pagan Online available now
Posted 27-Aug-2019 20:22


Starship hopes new app will help combat antibiotic resistance challenges
Posted 27-Aug-2019 19:43


Intel expands 10th Gen Intel Core Mobile processor family
Posted 23-Aug-2019 10:22


Digital innovation drives new investment provider
Posted 23-Aug-2019 08:29



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.