yahoo hack/virus

[kisskatlyn]

I logged into the web-based yahoo messenger last week and someone on my yahoo messenger list was sent a link "check this out!" which asked for the yahoo password/id. They entered it unfortunately and now have lost control of their yahoo account.

I have searched all over the internet trying to find a reference to some sort of yahoo hack or virus but cannot find any. Has anyone heard of anything? It was not me that sent this message to her and it did not originate from my computer, and it was not someone merely logging in after me as I was the only person in the computer lab at school and our computers are locked down pretty tight (they completely reset which means everything including cookies, temp files, files saved to the desktop, changed made to program settings, etc disappears when they are logged off). I believe it is related to the web messenger.

anyone hear about this before?

[Tipsy]

Edit to say not to worry - didn't read it properly.

Sounds like some kind of virus picked up from kazaa files or similar.

[jimmyf]

my Yahoo bot must be out of control again. I'll fix it right away.

[jimmyf]

Originally posted by Tipsy
A web page asked for an ID and password and someone was stupid enough to enter it? How is that a hack?

my Yahoo bot will.

[kisskatlyn]

Originally posted by Tipsy
Edit to say not to worry - didn't read it properly.

Sounds like some kind of virus picked up from kazaa files or similar.

but if you read my post you would see that the message didn't come from my computer...and even if it did I don't have kazaa or anything like that.

[GFED]

a simple bot can do that...

[kisskatlyn]

Originally posted by GFED
a simple bot can do that...

I don't really understand...if the bot is not installed on the computer I was on, how would it have gotten in? Is it in the yahoo servers (considering I was logged onto yahoo web messenger)?

[GFED]

Originally posted by kisskatlyn


I don't really understand...if the bot is not installed on the computer I was on, how would it have gotten in? Is it in the yahoo servers (considering I was logged onto yahoo web messenger)?

a bot can send messages thru IM... and log conversations...
but you said this person actually followed a link and gave their password? what was the url? try to find out who owns the domain. report it.

[kisskatlyn]

we don't know what the url was because her history clears every day and she can't get into her yahoo account so she can't read the archive

[GFED]

Originally posted by kisskatlyn
we don't know what the url was because her history clears every day and she can't get into her yahoo account so she can't read the archive

Maybe she can report it still to yahoo and they can track the IP used to change the password?

[420]

Sounds like some sort of worm that sent out the URL of the password scam. Last year sometime there was an e-mail virus mailing itself out to everyone on your yahoo address book, this sounds very similar but I don't know the details.

Anyhow, I don't see the point of stealing yahoo messenger accounts as they are free to create. If you really want your account back, you just need to complete the forgot password forms with the information you entered at signup.
http://edit.yahoo.com/config/eval_fo...tner=&.intl=us

[kisskatlyn]

she already reported it to yahoo and they didn't seem to care. They told her to send the info that is in her profile and they will reset the password but of course the info in her profile has been changed so the info that she sent them didn't match and they wouldn't reset it, just told her to create a new account.

I'm not as concerned about her getting her account back as I am in making sure this does not happen again as I would hate for all of my contacts to encounter a similiar problem.

Has anyone heard about this or have any idea what may have happened?

[kisskatlyn]

Originally posted by 420
Sounds like some sort of worm that sent out the URL of the password scam. Last year sometime there was an e-mail virus mailing itself out to everyone on your yahoo address book, this sounds very similar but I don't know the details.

Would this worm have to be installed on the computer? Because there is nothing on my computer and I am certain there would have been nothing on the computer I was using (school computer)...especially considering the yahoo program is not installed, I was using the web-based yahoo