Phishing attack targets Hotmail

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Oct 06, 2009 12:11 am

http://news.bbc.co.uk/2/hi/technology/8291268.stm

Quote:

Thousands of accounts on web-based e-mail system Hotmail have been compromised in a phishing attack, software giant Microsoft has confirmed.

BBC News has seen a list of more than 10,000 e-mail accounts, predominantly originating from Europe, and passwords which were posted online.

Microsoft said it had launched an investigation.

Phishing involves using fake websites to lure people into revealing details such as bank accounts or login names.

"We are aware that some Windows Live Hotmail customers' credentials were acquired illegally and exposed on a website," said a Microsoft spokesperson.

"Upon learning of the issue, we immediately requested that the credentials be removed and launched an investigation to determine the impact to customers."

Quick change

Graham Cluley, consultant at security firm Sophos, told BBC News the published list may just be a subset of a longer list of compromised accounts.

"We still don't know the scale of the problem," he told BBC News.

Technology blog neowin.net was the first to publish details of the attack. It said the accounts were posted on 1 October to pastebin.com, a website commonly used by developers to share code.

Although the details have since been removed, BBC News and Neowin has seen a list of 10,028 names beginning with the letters A and B.

BBC News has confirmed that the accounts are genuine and predominantly originate in Europe.

The list included details of Microsoft's Windows Live Hotmail accounts with email addresses ending hotmail.com, msn.com and live.com.

Mr Cluley advised Hotmail users to change their password as soon as possible.

"I'd also recommend that people change the password on any other site where they use it," he said.

Around 40% of people use the same password for every website they use, he added.

Hotmail is currently the largest web-based e-mail service.

Posted: Tue Oct 06, 2009 6:11 am

MS have suspended the accounts of those who had been compromised - so some poor sod was not only compromised, but then had his account suspended for no apparent reason. What fun to be a MS customer.

FWIW I had my account suspended for spamming (wasn't me) and they told me.. by email Rolling Eyes

Wannabe Baiter Joined: 18 May 2009 Posts: 81

GordonBennett wrote:

What fun to be a MS customer.

It has since affected gmail addresses, too: http://news.bbc.co.uk/2/hi/technology/8292928.stm (not that I am standing up for M$ in anyway whatsoever Laughing

, just saying)

Phishing attack targets Hotmail	View next topic View previous topic