Industry-wide email threat
p2pnet news view Advertising | P2P:- Online advertising company Google has promised to “immediately safeguard” Gmail accounts targeted as part of an “industry-wide phishing scheme,” says the BBC.
Windows Live Hotmail users have already been warned to change their password and security question immediately following a “possible Windows Live Hotmail ‘hack’ or phishing scheme where password details of thousands of Hotmail accounts have been posted online,” reported Neowin.
This list contained some 10,000 names.
Now, a further 20,000 names and passwords from such as Yahoo and AOL have been posted online, says the BBC.
Google claims, “fewer than 500 of its accounts had been affected by the scam,” but has refused to say how many accounts on a third recently discovered list, it says, going on:
“The firm stressed that the scam was ‘not a breach of Gmail security’ but rather ‘a scam to get users to give away their personal information to hackers’.”
Some accounts on the 20,000 list, “appear to be old, unused or fake,” says the BBC, adding, “However, BBC News confirmed that many – including Gmail, Yahoo and Hotmail addresses – were genuine.
“Other addresses on the list include Comcast and Earthlink accounts.
“It is not clear whether the new lists was part of the same phishing attack that collected the Hotmail addresses or a separate scam.”
Both lists can still be accessed online, says the story.
BBC – Google targeted in e-mail scam, October 6, 2009
already been warned – Hotmail passwords leaked online, October 5, 2009
Neowin – Thousands of Hotmail passwords leaked online, October 4, 2009
Use free p2pnet newsfeeds for your site. It’s really easy!
Subscribe to p2pnet.net | | rss feed: http://p2pnet.net/p2p.rss | | Mobile – http://p2pnet.net/index-wml.php
Net access blocked by government restrictions? Use Psiphon from the Citizen Lab at the University of Toronto. Go here for details.
October 7th, 2009 at 12:49 pm
it would be nice if we could get access to the list of accounts(not passwords) so then we can know if our accounts were under threat.
it still makes me wonder how people fall for these schemes.
October 8th, 2009 at 12:12 am
Even if you could read the list and discovered your account was not on it, that would be no guarantee that it’s not on some other list out there undiscovered as of yet. The wisest course of action is to change your password and challenge question/answer if you have a Live ID of any kind. Changing all of ones important passwords on a regular basis is actually part of good all around security.