[GRLUG] hacked

[Patrick TenHoopen]

This happened to one of our employees at my company.  They got about 60,000 replies overnight.  It was a mess to clean up let me tell you!

> Date: Wed, 27 Jul 2011 12:27:58 -0400
> From: topher at codeventure.net
> To: grlug at grlug.org
> Subject: Re: [GRLUG] hacked
> 
> On Wed, 27 Jul 2011, Jeff DeFouw wrote:
> 
> > On Wed, Jul 27, 2011 at 10:37:41AM -0400, Casey DuBois wrote:
> >> Hey Guys,
> >>
> >> My Yahoo seems to have been hacked by a spambot.
> >>
> >> It looks to have started at 7:40 and I got the first copy from myself
> >> at around 7:43.
> >> From what I can see it started hitting some heavy bounce/returns about
> >> that time and may have stopped or got blocked.
> >> I was able to change my password by 8ish but it looks like the damage
> >> had been done.
> >
> > It's common for spammers to forge a real person or company e-mail
> > address to send out spam.  Access to your account is not required.  Did
> > you look at the bounce headers to see if the outgoing mail went through
> > Yahoo?
> 
> It's called a Joe Job, it's VERY common.
> 
> http://en.wikipedia.org/wiki/Joe_job
> 
> It's amazingly easy for anyone to do.
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> _______________________________________________
> grlug mailing list
> grlug at grlug.org
> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
 		 	   		  
-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shinobu.grlug.org/pipermail/grlug/attachments/20110727/cc124ca2/attachment.html>