Yikes! What's happening at Hotmail?

[Globalti]

Quite a few people have emailed me asking why I have sent them an email from my Hotmail account with a link, which (thankfully) they can't open. I have also received the same email and link from other Hotmail users, it asks you to fill in some details so must be phishing. Googling this it looks as if Hotmail and other web-based email services are regularly targeted in this way.

On advice I have changed my password but it's too late really as somebody already has my contacts list. How does this kind of phishing attack work? How did they get access to my contacts list?

 

[summerdays]

This has happened a couple of times to me (to be on the receiving end of an email from a "friend") and each time I have only received the one email from the person or two at most so I don't think it is a major problem from your contacts point of view and you have already changed your password. I would say that the the friends (different friends not the same one each time) email account where this has happened has been a hotmail account in all 3 cases.

I think they normally get your email address/account access from clicking on a dodgy link possibly? Not too hot on that.

 

[jugglingphil]

Looks like this has happened to a friend of mine this weekend, as I'm getting silly messages from his hotmail address.

 

[jay clock]

it happens a couple of times a week.... god knows!

 

[ColinJ]

Check your machine for viruses and malware. You might have a key-logger lurking there.

 

[Lisa21]

I had 2 of these Emails from someone I know. Stupidly I clicked on the link and in both cases it took me to the same site, I cant remember what it was called but it was an online-auction site. I deleted them both, and did a scan (Microsoft essentials) which says all is fine. But after reading Colin J's keylogger post I am worried

 

[Leedsbusdriver]

I had 2 of these Emails from someone I know. Stupidly I clicked on the link and in both cases it took me to the same site, I cant remember what it was called but it was an online-auction site. I deleted them both, and did a scan (Microsoft essentials) which says all is fine. But after reading Colin J's keylogger post I am worried

If you are still worried about keyloggers can i recommend Superantispyware.Download the free edition it is really rather good.

 

[Gary E]

This happened to my son. His MSN account had been hijacked. Even if you leave your PC turned off the emails are still sent out.

Basically someone has got hold of your password and is using it to log in as you.

Take a look here :

http://windows.microsoft.com/en-US/hotmail/hacked-account-faq

 

[Gary E]

Oh yeah and warn all your mates not to open attachments from you. The attachment may not appear to lead anywhere but may contain the virus that hacked your password in the first place.

 

[Lisa21]

If you are still worried about keyloggers can i recommend Superantispyware.Download the free edition it is really rather good.

Thanks LBD, I shall do that now. My laptop seems fine but you cant be too careful.xx

 

[PaulSB]

This happened to my son. His MSN account had been hijacked. Even if you leave your PC turned off the emails are still sent out.

Basically someone has got hold of your password and is using it to log in as you.

Take a look here :

http://windows.microsoft.com/en-US/hotmail/hacked-account-faq

Much of the contents of the link are routine precautions any user should be taking especially the following:

Good anti-virus software set to auto update every 24 hours and run on the same basis

Set windows on auto update but ask before installation - just so you know what is happening.

Both at work and home we very rarely have virus issues. Work because we religiously run all protective routines - when i come across colleagues with a problem they invariably have no quality protection. At home when we did it was ALWAYS caused by the kids swapping files on MSN. Personally I would not let either Hotmail or MSN near any computer I own - both lack security and are far too easily hacked if user experience is anything to go by.

 

[Manonabike]

This has been happening to Hotmail account holders for over two years now.

Here what you have to do....

1 Scan your computer for viruses and malware
2 change your hotmail account password.

If you check your emails on public computers then make sure you log out --- you still take a risk IMHO

 

[Inertia]

malwarebytes is my software of choice for removing malware on infected computers, combined with rkill they havent met a malware or spyware they couldnt remove

http://www.bleepingcomputer.com/forums/topic308364.html
http://www.malwarebytes.org/

 

[ColinJ]

Oh - one of the most obvious ways to give away your secrets is to use insecure WIFI!

Make sure that your home WIFI is secure.

If you are going to use public WIFI, be aware that that bloke sitting opposite you could be monitoring everything that you do - read this! If you didn't have to set up a password to gain access to the WIFI network then it is insecure unless the site you are using is accessed via SSL (address begins with HTTPS not HTTP) or you use a Virtual Private Network (VPN).

Hotmail is insecure on insecure public WIFI!

 

[ColinJ]

It still beggars belief how many people don't even have the most basic security on their home wifi or if they have bothered, use WEP.

Four out of the eight wifi networks I can see from my house are unprotected. Two use WEP.

That's typical for everywhere that I've checked too!

I had a chat with a colleague about WIFI security once. He just wasn't interested in spending the 5 minutes necessary to secure it. He thought I was a paranoid loon - as if anybody would want to want to mess with his internet! This was an intelligent man ...