Team-BHP - Yahoo Id phished !!

Hi All,

My yahoo id got hacked and I have already sent an Email to yahoo, have any of you experienced the same and if yes, how do I retreive the id back.

I was online on yahoo listening to launchcast and one of contacts comes online after 10 days or so, he usally is online !! so I ask him after a long time and all that and later he sent me .html file and told me that it contains pictures of him with sharukh khan.

if it was somebody else I would not have beleived it, but he could have actually taken a pic with him !!

So I click on the .html file and a local yahoo page appears, so I tell him to share the pics on yahoo messenger or send me a link, he tells me that the picture are stored on a folder and you have to log in to view them.

So i do the same and I see a different address the page is contacting and I immediately log in to yahoo to change my address, I login also but when I try to save the New pass some thing happened with the internet connection and when I tried to login again, gone, the id is gone.:Shockked:

Any suggestions will be appreciated.

:uncontrol cant help it dude. I was feeling alone on this count.

Same thing happened with me a few months back.
Had to go through a laborious procedure to reset the password.

try the "forgot id/password" link & go thru the charade. If you can remember all the details exactly from the time you created the account, consider yourself lucky. The job is done.
if # 1 dint work write to my-login-support@cc.yahoo-inc.com stating your :Frustrati position
Follow up promptly & threaten to changeover to gmail if its not solved quickly.

Time frame for the above.

It took 5 days for me to get a reply from that email in step 2.

It took 6 more days of interaction (twice a day because of the time difference, I used to interact with guys from both morning & evening shifts)

Good Luck & cheers

Quote:

Originally Posted by eclectix 1st (Post 660545)

cant help it dude. I was feeling alone on this count.

Same thing happened..........................It took 6 more days of interaction (twice a day because of the time difference, I used to interact with guys from both morning & evening shifts)

Good Luck & cheers

Thanks for the reply man. Hell i remember the details, lol man I saw the .html file that sen sent and when I opened it I even saw that there was not https:// secure login, I thought maybe it will appear after i login !!

and also in the address bas it was showing the path of the file on the local drive and still !! cos i received it from a friend i did not doubt much.

my yahoo id was also hacked about 1.5year ago ramieee@yahoo.com the guy who hacked sent me a mail on the alternate id to pay him USD35 for getting the password on his paypal account,i tried convincing him through mails but his thing was only money,finally one day i mailed him an abusive mail till my inner evil came out on him :p and then just moved on with the other id...

yahoo wont help you in any kind,infact i feel they are the one who do it for fast cash( No offence ment to anyone please)

cheers..!!

Quote:

Originally Posted by bmdesai1987 (Post 660618)

LOL ramie.... that's the best thing you can do....

@JPL If you dont mind then try asking him which group he belongs to... if i knew him i will get back your id. Dont ask me how.

A ray of light, yeah I think so. Dude lemme see if he contacts me and I will let you know.

Thanks.

BTW its not hacking, my password cannot be hacked its super strong with caps,special characters and numbers totalling 14 chars lol.

Its phishing, he saves the yahoo login page and edits it in notepad with a new script and voila he receives the email id and password.

Iam also working on something like this as we speak and send it to him ,lol, lemme see.

Quote:

Originally Posted by ramie2400 (Post 660589)

yahoo wont help you in any kind,infact i feel they are the one who do it for fast cash( No offence ment to anyone please)

cheers..!!

I beg to differ on this point. my yahoo id was compromised in April & yahoo customer service was very professional with the help.

Because of the security issue I had to go thru several steps (see my earlier post on the same thread) before they were convinced of my authenticity.

I've been using yahoo for last 12 years & a lot of private data was stored so I took it upon myself to escalate the matter. I even called up their HQ in California to follow it up. It finally worked out for me.

Once the issue was resolved couple of execs from Yahoo actually called up to get a feed back.

It was a jolly good experience.

Quote:

Originally Posted by anonymous (Post 660630)

This is why its recommended not to use this kind of format while writing your ID in any public forum, as its really easy for hackers to pick it up, instead use ramieee(at)yahoo.com

Thanks for the information mate suerly i will write (at) in all my id's mentioned on the internet:) well to this id was more than 12years old and now it does not existes no no issues for the same,I am totally cut off with this one.

Sorry for jacking
cheers

Guys, today my yahoo account got hacked.
Mails were sent from my yahoo id to all the contacts of my address book. It came to my notice when I received a mail in my gmail id from my yahoo id mentioning some obscure Chinese link.
I am in the IT profession, so I know and practice the general precautions of computer & network safety. My office laptop has McAfee and home laptop has AVG installed. I do not surf any porn sites, which I know are generally a front for the hackers. I do not open any spam mail links.
So I do not understand how my account got hacked. I can see from yahoo mail recent activity logs that my account has been accessed from Pakistan. I have never visited any .pk site in my life (not even the very popular site Songs.PK - Download Bollywood Songs,Songspk,Mp3 Songs,Bollywood Music,Indian Movie Songs,Hindi Music,Indian Mp3) For the last 2-3 days, I am surfing some Chinese electronics site to procure a cheap tablet. Can I get hacked by this activity?

I have changed my password immediately before more damage can be done.
My question is, what more precaution can I take to prevent such a think in future

[the UK location in the photo is because of UK proxy I use in my office laptop; I am based in Bangalore]

Quote:

Originally Posted by ankan.m.blr (Post 2792021)

For the last 2-3 days, I am surfing some Chinese electronics site to procure a cheap tablet. Can I get hacked by this activity?

I have changed my password immediately before more damage can be done.
My question is, what more precaution can I take to prevent such a think in future

[the UK location in the photo is because of UK proxy I use in my office laptop; I am based in Bangalore]

I am assuming you take care of basic things like :

Using the latest version of a good browser (i.e. Firefox, chrome etc).
You have a strong password
You don't fall for phishing scams. You don't provide third party apps with your yahoo mail password.
You have malware, keylogger, virus scanners running regularly.

Now you need to make sure you do the following

Javascript and cookies are the biggest reason for internet pain. Make sure you run addons like "noScript", "ghostery" to ease some of this pain.
Run the private browsing mode when you are surfing unknown, potentially dangerous sites.
Have a good password recovery option on your email accounts.
If possible move to Gmail. Their fraud detection is much much better than any other system. They can detect unusual logins and stop the email sending.

Quote:

Originally Posted by ankan.m.blr (Post 2792021)

Source :- My friend..

Don't trust android phones.....

1. create new user profile. (instant relief)
2. update windows patch by going to [control panel > updates] including service pack. Windows XP has SP2 and windows vista / 7 has SP1
3. update antivirus, if u don't have any then download free edition from Avira Free Antivirus - Download Best Antivirus Software
4. run the antivirus scan on complete drive.
5. download windows defender Download: Windows® Defender - Microsoft Download Center - Download Details for checking on any abnormal activity and registry cleanup.. this will only be available on legal windows license.
6. reset all your account password and hint/secret question ( mails/bank), this is not required but good to be on safer side.

Steps you should take

- Update your password reset info with alternate email ID and mobile number
- Set up your second sign in verification (if you can)
- Update your contact info with alternate email ID and mobile number

This way you will ensure no one will be able to break in unless they have your password.

For MITM attacks i would recommend, always check HTTPS/SSL connection on your browser and create a sign in seal.