[GRLUG] hacked

[Michael Mol]

On Wed, Jul 27, 2011 at 12:27 PM, Topher <topher at codeventure.net> wrote:
> On Wed, 27 Jul 2011, Jeff DeFouw wrote:
>
>> On Wed, Jul 27, 2011 at 10:37:41AM -0400, Casey DuBois wrote:
>>>
>>> Hey Guys,
>>>
>>> My Yahoo seems to have been hacked by a spambot.
>>>
>>> It looks to have started at 7:40 and I got the first copy from myself
>>> at around 7:43.
>>> From what I can see it started hitting some heavy bounce/returns about
>>> that time and may have stopped or got blocked.
>>> I was able to change my password by 8ish but it looks like the damage
>>> had been done.
>>
>> It's common for spammers to forge a real person or company e-mail
>> address to send out spam.  Access to your account is not required.  Did
>> you look at the bounce headers to see if the outgoing mail went through
>> Yahoo?
>
> It's called a Joe Job, it's VERY common.
>
> http://en.wikipedia.org/wiki/Joe_job
>
> It's amazingly easy for anyone to do.

In this case, GMail authenticated the email as sent by Yahoo's servers.


-- 
:wq

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.