Spammer hacking Hotmail accounts? - GoFuckYourself.com

mardigras · 04-25-2006, 06:20 PM

Was checking my personal e-mail account I use for friends and family when I saw a message I recognized by the formatting of the sender name as being from my old Hotmail account I've had since '97 but never use now. All of the recipients were visible, and it consisted of everyone in that Hotmail account's address book (no one else), which happened to also have my ISP e-mail addy in it, so I got a copy of the message there.

The Subject line said: Help
The body was:

Hi! How are you?
I started my own website! Can you check it?
It's http://www.sitename.net/test . Did you see video?
Thank's!

It had the footer that Hotmail adds to messages and appeared to have actually been sent from the account.

I doubt it is spyware/worm related on this PC as all updated scans are clean and I have not set up any e-mail accounts since formatting a couple weeks ago. If it were simply a case of a harvested addy being used to send spam it seems there would have been recipients other than the accounts own addy book...

Anyone got a clue? Randomly using Hotmail accounts to spam their own address books would sure be one way to fly under MSNs spam radar

I've deleted all the entries in the address book except my own so I can monitor...

BTW, I edited out the "sitename" for this post while I investigate and eliminate all possibilities on my end so as to not cast suspicions on any innocent site operator. The spam link was a US based domain.

CyberHustler · 04-25-2006, 06:22 PM

if you send someone and email that you also sent to everybody else thier email address will be in the "sent to" section... available to see for everybody u sent too

mardigras · 04-25-2006, 06:26 PM

Quote:

Originally Posted by BuySexProducts

if you send someone and email that you also sent to everybody else thier email address will be in the "sent to" section... available to see for everybody u sent too

I never send e-mail from that account (this message was marked 3 days ago) and I have never used Send to All from that account.

mardigras · 04-26-2006, 06:46 AM

Bump for the day crowd...

I have checked everything I can think of and everything seems to point to the mail actually having been sent from the Hotmail account, whether manually or mechanically.

This smells like something big, I highly doubt someone went to the trouble to crack into only my old Hotmail account just to send test spam to it's relatively small and mostly dead address list...

Sam Granger · 04-26-2006, 06:50 AM

Doesn't a hotmail account expire after 3 weeks? maybe be grabbed it somehow and everything was still there? :S

Sucks whatever happened, good luck getting the bastard.

mardigras · 04-26-2006, 07:04 AM

Quote:

Originally Posted by Sam Granger

Doesn't a hotmail account expire after 3 weeks? maybe be grabbed it somehow and everything was still there? :S

Sucks whatever happened, good luck getting the bastard.

Hotmail accounts go into "hibernation" after 60 days. You can reactivate them any time after that just by logging in, although any messages from before will be gone. They don't expire the accounts because the addresses are tied into .NET Passport and MSN Messenger as user IDs.

Even if the accounts did expire and someone was able to grab the old account name they would have to choose their own password at the time of creating a new account with the address. Nothing was changed in my Hotmail account, including the password (I logged in to it immediately when I saw the message from it to all of it's own address book

).

seeric · 04-26-2006, 07:06 AM

mail <>< ing

sounds like they got you. happened to me a while back.

Sven-David · 04-26-2006, 07:10 AM

just check this out

mardigras · 04-26-2006, 08:03 AM

Quote:

Originally Posted by A1R3K

mail <>< ing

sounds like they got you. happened to me a while back.

What is that? How does it affect a web-based e-mail account?

04-25-2006, 06:20 PM	#1
mardigras Bon temps! Join Date: Feb 2003 Location: down yonder Posts: 14,194	Spammer hacking Hotmail accounts? Was checking my personal e-mail account I use for friends and family when I saw a message I recognized by the formatting of the sender name as being from my old Hotmail account I've had since '97 but never use now. All of the recipients were visible, and it consisted of everyone in that Hotmail account's address book (no one else), which happened to also have my ISP e-mail addy in it, so I got a copy of the message there. The Subject line said: Help The body was: Hi! How are you? I started my own website! Can you check it? It's http://www.sitename.net/test . Did you see video? Thank's! It had the footer that Hotmail adds to messages and appeared to have actually been sent from the account. I doubt it is spyware/worm related on this PC as all updated scans are clean and I have not set up any e-mail accounts since formatting a couple weeks ago. If it were simply a case of a harvested addy being used to send spam it seems there would have been recipients other than the accounts own addy book... Anyone got a clue? Randomly using Hotmail accounts to spam their own address books would sure be one way to fly under MSNs spam radar I've deleted all the entries in the address book except my own so I can monitor... BTW, I edited out the "sitename" for this post while I investigate and eliminate all possibilities on my end so as to not cast suspicions on any innocent site operator. The spam link was a US based domain.

04-26-2006, 06:50 AM	#5
Sam Granger Confirmed User Join Date: Dec 2004 Location: NL (Eindhoven), CZ(Prague), FR(Concarneau) Posts: 3,958	Doesn't a hotmail account expire after 3 weeks? maybe be grabbed it somehow and everything was still there? :S Sucks whatever happened, good luck getting the bastard. __________________ [img]http://**************/sig/fhv3_j2_624x80_2.gif[/img] $35-40 Per Signup, 60-70% Rev Share, over 80 Sites, Exclusive Sites, tons of free content 14,000+ Free hosted Galleries, RSS feeds, Domain Hosting, Embedded Flash Movies Join Fetish Hits now! ICQ:** 358652230

04-26-2006, 07:10 AM	#8
Sven-David Confirmed User Join Date: Apr 2006 Posts: 161	just check this out Last edited by Sven-David; 04-26-2006 at 07:12 AM.. Reason: wrong link - sorry!

04-25-2006, 06:22 PM	#2
CyberHustler Masterbaiter Industry Role: Join Date: Feb 2006 Posts: 26,180	if you send someone and email that you also sent to everybody else thier email address will be in the "sent to" section... available to see for everybody u sent too

04-26-2006, 06:46 AM	#4
mardigras Bon temps! Join Date: Feb 2003 Location: down yonder Posts: 14,194	Bump for the day crowd... I have checked everything I can think of and everything seems to point to the mail actually having been sent from the Hotmail account, whether manually or mechanically. This smells like something big, I highly doubt someone went to the trouble to crack into only my old Hotmail account just to send test spam to it's relatively small and mostly dead address list...

04-26-2006, 07:06 AM	#7
seeric .......... Industry Role: Join Date: Aug 2004 Location: .......... Posts: 41,917	mail <>< ing sounds like they got you. happened to me a while back.