PDA

View Full Version : Weirde ??? emails



NZHawk
10-02-2013, 08:36 AM
I have received a bunch of emails from people who have my email address that I know

subject: (no subject) Hey! or Hi!
and then the email message contains:
Hi http://www.jasdesnevieres.com/wzl/z19ty2txmtobf20zx4rgrlmdfn8t.kyj?9=5q (http://webmail.clear.net.nz/deferrer.html?redirectUrl=http%3A%2F%2Fwww.jasdesn evieres.com%2Fwzl%2Fz19ty2txmtobf20zx4rgrlmdfn8t.k yj%3F9%3D5q)

(bunch of blank lines)

then:
2/9/2013 5:56:26 AM
and
(the senders name)


the website link varies.

Are these people infected?

CYaBro
10-02-2013, 09:08 AM
They have yahoo Xtra account by chance?
http://thenextweb.com/insider/2013/01/31/yahoo-mail-users-still-seeing-accounts-hacked-via-xss-exploit-amid-reports-yahoo-failed-to-fix-old-flaw/

NZHawk
10-02-2013, 09:22 AM
Thank you - that does seem to reflect it all the emails are either xtra or yahoo

NZHawk
10-02-2013, 09:27 AM
could you explain in simpler english what the articles is saying

paulw
10-02-2013, 10:05 AM
Been getting a bucket of these yesterday . No I don't have a Xtra email account but I suspect those who they come from do..

Looks as though it was very wide spread hack of Yahoo mail as well.. Why Telecom still uses these bunnies is anyone guess..

CYaBro
10-02-2013, 01:17 PM
could you explain in simpler english what the articles is saying

Basically they are saying that the Yahoo mail system, which is what Xtra use, has been hacked and all they have to do to get access to your email account is get you to visit a certain website. Once there the code on the site does its thing without you having to click on anything else.
So be careful what links you click on in emails, even from people you know.

Apparently it has been fixed now but Yahoo have said that before too. :D

Renegade
11-02-2013, 08:28 AM
Apparently it has been fixed now but Yahoo have said that before too. :D


I suspect they're telling porkies, got 2 messages from 2 different addresses timestamped 4:18 & 4:34 am!

Speedy Gonzales
11-02-2013, 08:40 AM
The flatmate got 2 yesterday. One pointed to a site FF reported as a web forgery. Its probably related to this (http://www.nzherald.co.nz/technology/news/article.cfm?c_id=5&objectid=10864612)

NZHawk
11-02-2013, 08:47 AM
Just to clarify: as the article doesn't say; are the Xtra customer computers infected? or is / was it just the Telecom system?

Speedy Gonzales
11-02-2013, 08:53 AM
Contact telecom. Their email system was hijacked by spammers, by the looks of it

Renegade
11-02-2013, 08:54 AM
Think it's just the Yahoo/Xtra system - messages are sent out when the customers PCs are off.
Damn, just had a 3rd message come in stamped 4:38

This could be a busy day guys. "How do I change my password, can you do it for me???"

Speedy Gonzales
11-02-2013, 08:57 AM
Ring your ISP. Dont think you can change it without telling them first. Otherwise you wont get any email

dugimodo
11-02-2013, 03:39 PM
Yeah you can, I was stupid enough to click the link yesterday and had a bunch of undeliverable mail errors this morning. Feeling annoyed at myself because I know better, but it came from a trusted source and I didn't think about it.

Login to yahoo webmail https://login.yahoo.com/config/login_verify2?.intl=nz&.src=ym&.done=http://nz.yahoo.com/
click the drop down arrow next to Hi "somebody" and select account info, login again, chose the option that says change or forgotten password, and go from there.