- This topic has 5 replies, 5 voices, and was last updated 20 years, 6 months ago by
.
-
Posts
-
Hey everybody.. figured I’d post on here to explain to you what happened to me…
Well basically a couple of days ago, I figured I’d start using Yahoo again, since its such a pain if you try chat (all the porn bots).
Anyways.. so I came across this site:
I downloaded the following 2 programs – YahELite Chat Client & BuddySpySo I tried both, liked neither. YahElite is a pain to use, like an over complicated IRC interface. BuddySpy.. I didn’t know what it was doing.
Anyways, what I’m getting at is, today this morning I got an email in my hotmail (alternate email account for yahoo) saying:
Your Yahoo! ID is: xxxxxxxxxx
Your password for this account has recently been changed. You don’t
need to do anything, this message is simply a notification to protect
the security of your account.Please note: your new password may take a while to activate. If it
doesn’t work on your first try, please try it again later.DO NOT REPLY TO THIS MESSAGE. For further help or to contact support,
see http://help.yahoo.com/help/edit/***************************************************************blah blah… uless yahoo crap but no password provided.. but @ the bottom I see:
Click on the “My Yahoo! View.” On your My Yahoo! page, click on
“Account Information” on the upper right corner.[71.193.70.232]An IP address of the person that changed my IP, so I run a whois on it:
Comcast Cable Communications, IP Services ATT-COMCAST (NET-71-192-0-0-1)
71.192.0.0 – 71.207.255.255
Comcast Cable Communications, IP Services MINNESOTA-8 (NET-71-193-64-0-1)
71.193.64.0 – 71.193.95.255# ARIN WHOIS database, last updated 2006-02-08 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.
Now I am in CANADA, not MIN, and that IP addy is not mine. My password was not an easy password to bruteforce (so I can’t see how someone would find it). Which leads me to believe.. one of the 2 programs I used above may have been the culprit.Honestly I’m lucky that I rememberd my ‘recovery info’ for yahoo cause without it I couldn’t have gotten my account back..
But ya.. I guess if you choose to use these.. change your password to something temp, and or keep your info up to date so you can always recover.
Basically the password was changed @ like 8:17am EST, I got the email @ 8:30am EST and then changed my password back. Don’t know if this was some kinda bruteforce hack or someone knew my password.
I don’t give my pwd out, and nobody else has access to my pc..
So just a heads up.. Anyone else get this? I’m curious.. I had my very first yahoo account hacked before as well… and didn’t recover cause I didn’t use Canadian info to sign up (they didn’t have options for it.. so i forget the ZIP and so could never recover now).
😡
That is very distrubing information. As for me, I have not used BuddySpy but I’ve used YaElite without any problems….ever! And others on the site have used BuddySpy (which FYI is to see if some one on your list is online and invisible…hence I don’t use it for I’ve got no need to spy on anyone.)but no one so far has complained about that. I am sure the Yahoo! Team here at BBB will look into this and I’ll make sure to inform Jeff (or one of our Tech guru’s like Dave) right now of what happened so we can start investigating this. We certainly do NOT want any programs that might take a password.
In the meantime, I’d suggest scanning your PC for a trojan or virus….you may have magic PS or something of the sort (did you log into your messenger account at all with the REGULAR Yahoo! program? It may have been infected from the last time you used it. It was a “popular” one to send about two or three years back)I’ve been using BuddySpy for a while now with various different id’s of mine (before i settled on a new one), and i am still the owner of all accounts with the same password. I seriously doubt that your account being hacked has anything to do with you downloading one of these two programs simply because we’d have lots more people complaining from when these two programs first started being used which was a very long time ago. Besides, programs which take people’s ids don’t last very long since someone always finds out, they would never last as long as these programs have. (Why just do it to your id?, I doubt you have a rare since you mentioned you barely got a new account, so no real motive) I’d follow through with Oreo’s suggestion and scan your computer, since your accounts been taken before. Maybe you typed to some of the same people and one of them who took your previous account decided to do it again?
Well it could have been that you signed into Yahoo on a fake login page as well,I know a couple of sites that are into that and the pages look like the real thing.Always check the url,im so paranoid about being tricked into running into one of them due to the fact that i have alot of the so called rare Yahoo ID’s.I lost 5 of them about 2 weeks ago but luckily i had all of the onfo on 4 of them!
Just to clear it up. No I didn’t sign in on any other pages. I am a system admin and at work responsible for a networks security (which doesn’t mean much to you guys.. but just giving some info) so doing a virii/adware scan is pretty much scheduled daily on my comp…
I’m not one to sign into pages on yahoo.. lol if my password isn’t populated by firefox then I’m not gonna bother signing in.
But I was just surprised. I mean I’m not accusing these 2 programs of being the culprit… honestly I just think Yahoo’s security stinks, and by way of bruteforce someone got my password.
I think this for a number of reasons, 1 being that my VERY FIRST, yahoo ID was hacked 4-5 years ago. I got the ID back in like 94-95. Back when Yahoo first made emailing available.. so ya was a ‘grandfathered’ account if you will 😉
Anyways.. one day I couldn’t log in.. I tried different passwords, thinking… maybe I changed it? and its one of these others that I use. Well I never could log in. I contacted Yahoo and said my account was hijacked.. thye said.. here are a number of ways to log in.. lol just an automated response. And I don’t think they’d care really anyways to recover an account. But ya..
I was just doing a heads up for everyone using 3rd party Yahoo software & not just Yahoo, MSN as well.. never know when that proggie you download could actually submit l/p’s to a database while you use it.
I’m just happy I recovered my 2nd yahoo account from a hijacking.. 😀 😉
- You must be logged in to reply to this topic.