Yahoo Finance Message Board Censors Post about Massive Yahoo Email Breach

[gunDriller]

How do I know there was an email breach ?

Because I got the bounced emails.

Looking through the addresses - all of them familiar - I saw 150-250 emails of people I have corresponded with for personal, professional, informational, educational, business, etc. - all sorts of reasons.

So, in the past I have had success getting through the bureacracy using the Yahoo Finance board. e.g. I mistakenly returned an HP scanner to the wrong HP facility. HP continued to bill me for 2 scanners. I went to the Yahoo message board for HP - BINGO ! I'm on a first name basis with the HP CEO's personal assistant, and it got cleared up right quick.

Well, that doesn't work for a problem with Yahoo. Sort of logically, Yahoo will not let you use the Yahoo message board to announce to the investment community that there has been a breach of the Yahoo email system - even if it's true, and the Yahoo "help" ain't worth a bucket of manure with plastic bits in it.

So, here is my post. Originally I thought that this was separate from the Yahoo Voices hack in July 2012, which was reported to compromise 400,000 accounts - because I don't use Yahoo Voices. But - it's very possible that the data gotten in the July breach went beyond Yahoo Voices.

So, I don't know how it was done, but, SHIT - I might have to write 200 - or 10,000 - Apology Emails describing the breach & letting people know that that dumb spam ad was not from me.

One friend that emailed me after they got the spam, got one of those "work at home make $7000 a month" type ads.


"Dear Yahoo"

As of Wednesday November 14, Yahoo Email was hacked.

However, Yahoo's "Help" system does not, well, help.

Therefore, this is an appeal to Yahoo Investor Resources to notify your co-workers at Yahoo Technical. Please contact me at this email -
*
AY TEE
Yahoo.com

(Yeah, I know, Catchy, huh :-) )

In my case, the emails of people I have sent emails to during the last 5 years were involved. So far, 150 to 250 people that I know from professional, personal, & educational contacts have received emails that look like they are from me.

A brief description of my security -
Antivirus, definitions updated weekly
Anti-malware, definitions updated weekly
No-script type programs for each browser
Flash blocker
Zero wireless, home network is wired - for security reasons.

I also do not check my email on public Internet networks like Internet cafe's, for exactly this reason.

Despite all those measures, my primary Yahoo email account was still hacked.

My technical background - *

I have used email for about 20 years. This is the biggest hack I have ever seen.


ATTENTION YAHOO -
This is not a drill. Please contact me at the email I am posting with & let us get this resolved.

I am willing to provide copies of bounced emails to aid in your forensic technical analysis of this hack attack.


Sincere Regards,

~ Gundriller ~



So - has anybody else recently experienced an email breach or hack attack ?

First thing I did was change my password, which, thank God, the hacker did not change.

[woodman]

I thought it was just my computer that had a virus. My email sent out quite a number of emails to my contacts that were spam and alerted the spy software. It was rather embarassing for me and now I've found that some of those addresses will not accept my email apologies.

[gunDriller]

I thought it was just my computer that had a virus. My email sent out quite a number of emails to my contacts that were spam and alerted the spy software. It was rather embarassing for me and now I've found that some of those addresses will not accept my email apologies.

Thanks for the feedback.

Do you use Yahoo mail ?

I'm not really an IT guy, so I see a Yahoo Email breach and a Gmail Email breach (for example) as separate.

[woodman]

I use Yahoo mail for all my communications and business except my billing. I get my PO's by mail and all receipts I can. I am pretty concerned about this breach.

[undgrd]

Do you have a contact list stored on Yahoo or did it simply go through your inbox and sent items and start mailing?

[MNeagle]

My yahoo email has been hacked several times over the last few years & spam or gibberish sent over my acct. Now every day I check the spam folder before emptying it, & if there's one in there from my acct, I change my password immediately. A big tip-off is there's no SUBJECT, that field is blank. PITA.

[gunDriller]

Do you have a contact list stored on Yahoo or did it simply go through your inbox and sent items and start mailing?

i don't have a contact list, just a whole bunch of Sent emails.

whichever spammer is doing this, sends to about 10 email addresses from my "Sent" account at once. i hear about it when one of them bounces, i get one of those "Mailer Daemon" emails.

[Old Herb Lady]

More on the subject but different: Most people that know you personally also know the answers to your "secret questions"
like your favorite cat or dog 's name etc, they can request your password just like it's you & you forgot it. Quite simple.
You have to change your answers to something else , first of all.

Then you need to get into the guts of the account & see where the hacker's location is:

How to tell if your yahoo email has been hacked:

http://laughinglindsay.com/2011/06/how-to-know-if-someone-has-hacked-your-yahoo-email/


^^ They might not even get in there to cause any disruption. They could do it quietly & unnoticed just to read your emails
and you'd never know a thing unless you check to see if your log in times are yours and not someone else's !

PS. and people that go around using facebook and whatever that have "profiles" of themselves & their life & location all over the internet and their beloved kids & pets and their names etc make it so much easier for hackers to get in. They're really good at it. And the people that go around using the same handles at different websites, forums, etc just make themselves easy targets and don't even know it.

[vacuum]

What you are describing has happened to me, previously. Basically, spam emails are sent to all my contacts, which look like they came from me.

I don't believe this is a breach of yahoo mail, but rather a breach of your computer. If you leave your email open (or possibly automatically logs in without typing a password), then all a program has to do is go through your web browser to access your email.

This is what happened to me one time when I turned off my firewall overnight because I was working on something else.

The thing is, yahoo mail is so widely used that people spend time working on these programs that can navigate the mail system when if finds an account someone is already logged into on a machine which they've infected.