Passwords are the common example of simple one-factor authentication:
"something that only you know".  So if you've been able to change the
password, then you SHOULD now be the only person who knows it...  But to
avoid a repeat of the same issue, it would be nice to understand how
your old password became known to others.  Did you share it?  Was it
easy to guess?  Hopefully those are both "No" -- but time and again,
we've seen worms spread widely by logging into administrator accounts,
simply trying a list of 20-30 (or no more than 50) trivial passwords
such as "password", "12345", etc, so clearly real people sometimes do
choose really dumb passwords.
  I'm not certain whether Yahoo is vulnerable to the same issue (poorly
coded use of HTTPS for login) that made FaceBook passwords vulnerable to
the "FireSheep" exposure last year.  If you connect via unencrypted
wifi, this might have provided a way for someone else to learn your
password.
  MalwareBytes is a great program, and hopefully it will help identify
if your password was captured using malware on your computer such as a
keylogger.  Ideally, you need to perform this kind of check on every
computer from which you logged into Yahoo.

  Yahoo accounts do seem to get hacked like this, and used to spread
this variety of spam, fairly often -- which suggests to me that clicking
on the link in any of the spam messages might be a way to get your
account hacked like this....

  David Gillett
CISSP CCNP


-------- Original Message --------
Subject: [PCSOFT] Yahoo email hacked, What next?
From: Bruce Lund <[log in to unmask]>
Date: Fri, January 25, 2013 10:22 am
To: [log in to unmask]

OK, I am not thinking right at the moment. My email was hacked and the
last thing I want to do right now is deal with that.
Grrrrrrrrrrrrrrrrrrrrrrrrrrrrr!

First off, someone signed into my account from a couple different IPs in
the wee hours of the morning and sent a series of emails, apparently
with different links in each one. The common denominator was that none
of them had a subject line, which actually caused the spam sent to this
group get blocked. (Nice bit of filtering!)

OK, I have changed my password. I notified Yahoo. And I am going to run
a scan with Malwarebytes. What else do I need to do? Fortunately, none
of my bank or credit card accounts are tied to this account. But this is
not what I wanted to be dealing with this morning.

Bruce

PS Dealing wit this hack is bad enough. But they also changed me from
Classic Mail to the "new and improved" version which I hate, hate, hate!
Classic worked great with browser tabs and acted exactly as I wanted it
to. The new version is worthless to me. Anybody know how to get me back?
I understand that, if my monitor settings are at low enough resolution,
it will default back to Classic. Any thoughts? Anybody know an email
service that I can use where I can open emails in new tab from inbox
with tabs? Thank you.

 The NOSPIN Group is now offering Free PC Tech
 support at our website:
 http://freepctech.com

             Do you want to signoff PCSOFT or just change to
                    Digest mode - visit our web site:
                   http://freepctech.com/pcbuild.shtml