View Full Version : My Yahoo account held for ransom... help!
Project86
10-07-07, 03:15 PM
I've had a free yahoo email account for about 5 years now. I lot in almost everyday. The other day, it would not accept my password. I tried to password recovery verification option, it didn't work. Just for grins I sent an email to that address from my gmail account. Someone replied back saying basically "we hacked your account, give us $80 an we'll give it back".
Now this is a free account, so no big loss, but I'd still like it back if possible. Any ideas? I can't find any place to email yahoo for help, and even if I could, they have no way to verify who I am. What about the "password recovery" type of programs?
If I can't get back in to the account, I'd at least like to somehow disable it or fill it with so many worms/virus/etc that it is not safe to use. I have another gmail address provided by the person as well, so I could fill both of them.
I've never had anything like this happen, so I'm not sure what to do, but I know some of you are very clever... help me!
Thanks
eaglescouter
10-07-07, 03:43 PM
start by notifying yahoo.
OkydOky
10-07-07, 04:36 PM
start by notifying yahoo.
Project86
10-07-07, 05:19 PM
start by notifying yahoo.
how? I've looked but can't find a way to contact them. Their help center is not very helpful.
Moto7451
10-07-07, 07:26 PM
See here (http://security.yahoo.com/article.html;_ylc=X3oDMTFhOWJhMGZmBF9TAzU2NTAwMDAw MgRhaWQDMjAwNjEwMjYwMwRjbmFtZQNmZWF0dXJlZA--?aid=2006102603).
The general security link is:
http://add.yahoo.com/fast/help/us/security/cgi_feedback
If you are not able to sign into your Yahoo! account in order to change your password, please contact Yahoo! Customer Care and supply as much detail as possible regarding the problem.
Both are direct links from the security center.
Project86
10-08-07, 12:40 AM
thank you I have contacted them
What did they say?
I guess it goes without saying - get a better password!
Project86
10-08-07, 05:06 AM
well yahoo has not responded yet, but ebay was also hacked. I was able to get them to reset everything for me. The person had bid on like 30 items, all laptops and cell phones. From the messages, it looks like they tried to pay with some spoofed paypal. I have their ISP logged but not sure what I can really do with that.
I had a pretty decent password before, now I have an extreme password.
Albaholic
10-08-07, 07:04 AM
wow. I never actually knew anyone this happened to.I need to do better with my passwords too
CreePinG_DeatH
10-08-07, 10:17 AM
If they managed to get into your yahoo account and your Ebay account, then maybe you have a keylogger or other malware on your system. It really isn't worth the time to "hack" a free email account. It sounds like the passwords just "dropped in their laps" or they know you have something valuable to lose
Mr.Guvernment
10-08-07, 10:27 AM
i nthey got your yahoo and your ebay then
1. they got into your computer or your using yahoo email on your ebay account
2. you use the same password for everything - not smart
change passwords, use diff passwords for diff things and change all other things NOW, dont wait for them to get hacked as well.
JamesXP
10-08-07, 10:41 AM
I'd do a reinstall of windows, don't bother trying to remove it because you just don't know and I like to be safe :)
If you have the IP + ISP report the IP to the ISP they will most likely suspend their internet access or take it further.
I'd do a reinstall of windows, don't bother trying to remove it because you just don't know and I like to be safe :)
If you have the IP + ISP report the IP to the ISP they will most likely suspend their internet access or take it further.
That's a good idea!
overclucker
10-09-07, 05:09 AM
wow that sucks man
custom90gt
10-09-07, 09:11 AM
PM SSS, he may be able to help you since you have their ISP, if not he can probably point you in a good direction.
||Console||
10-09-07, 09:43 AM
Was your yahoo your account the email that you used to register for ebay with ?
If not then you should really do a reinstall like stated above . because it does sound like you have some type of security problems .
I'm guessing you used the same pw on a lot of sites, and one wasn't so reputable or had bad security and got hacked. Then it was easy to test that pw everywhere else.
I definitely would not pay them, and I would contact yahoo, ebay, and file a complaint with the fbi.
Mr.Guvernment
10-10-07, 10:23 PM
how did you get their IP? what email domain did they use, if a free one, that isnt their IP.
Project86
10-11-07, 08:07 PM
how did you get their IP? what email domain did they use, if a free one, that isnt their IP.
I still have the alerts in my Ebay messages, that show the account password had been changed. this is what it says:
The Password Change request was made from:
IP address: 212.165.151.10
ISP Host: 10.11.64.252
The ip is coming from Kenya but that does not mean your script kiddy is located there.
The ip is coming from Kenya but that does not mean your script kiddy is located there.
Well said. You won't be able to figure out where he is.
Dapper Dan
10-12-07, 01:02 AM
lol good hackers hack one computer then hack into yours with that one so they don't get caught... lol i've read a few books about hacking
Adragontattoo
10-12-07, 08:33 AM
lol good hackers hack one computer then hack into yours with that one so they don't get caught... lol i've read a few books about hacking
This is not an issue of a "hacker"
This is a script kiddie who got lucky, most "hackers" dont sit around trying to crack a Yahoo account and bid falsely on ebay.
||Console||
10-12-07, 09:06 AM
Welcome to the world of Proxies and Botnets
gangaskan
10-14-07, 06:33 AM
This is not an issue of a "hacker"
This is a script kiddie who got lucky, most "hackers" dont sit around trying to crack a Yahoo account and bid falsely on ebay.
exactly, hackers go for bigger fish, like Monster :P
I hope you have changed your OCF password! Nevermind ebay or paypal or whatever, you cannot afford to lose your OCF account!
Goshawk
10-14-07, 11:10 AM
What a bummer :( Sorry to hear this happening to you. As was said in previous posts, i would reinstall just to make sure that any malware is flushed out.
WHat i'd do, is create 2 or 3 passwords, around 16 - 20 characters, that are random numbers and letters and memorize them... then start changing your passwords to something different.
~ Gos
What a bummer :( Sorry to hear this happening to you. As was said in previous posts, i would reinstall just to make sure that any malware is flushed out.
WHat i'd do, is create 2 or 3 passwords, around 16 - 20 characters, that are random numbers and letters and memorize them... then start changing your passwords to something different.
~ Gos
that's a whole lotta letters!
Captain Newbie
10-14-07, 02:48 PM
well yahoo has not responded yet, but ebay was also hacked. I was able to get them to reset everything for me. The person had bid on like 30 items, all laptops and cell phones. From the messages, it looks like they tried to pay with some spoofed paypal. I have their ISP logged but not sure what I can really do with that.
I had a pretty decent password before, now I have an extreme password.
Contact their ISP's abuse contact.
exactly, hackers go for bigger fish, like Monster :P
That sense of 'hacker' is deprecated, please use the term 'cracker' when talking about retards who commit computer crimes.
That sense of 'hacker' is deprecated, please use the term 'cracker' when talking about retards who commit computer crimes.
like a salt cracker that you put cheese on? :confused:
Project86
10-14-07, 06:23 PM
Well, here's an update. What I believe happened was that he somehow got into my ebay account. The account was linked to the yahoo email, whith the same password (bad idea, I know).
The guy ended up bidding and winning dozens of laptops, high end cell phones, and other fun items. He then emailed fake paypal payment notices, hoping someone would just send the item without logging in to paypal to verify their balance. It seems as though nobody was stupid enough to fall for that, but I'm still keeping an eye out for any packages that show up at my door.
I was eventually able to get Ebay and yahoo to reset my passwords. Ebay was great - they had already suspended the account for suspicious bidding. Yahoo made me jump through more hoops but eventually let me back in.
I now have very long passwords, with numbers and symbols, that are unique for each service. It's a hassle, but worth it.
like a salt cracker that you put cheese on? :confused:
American slang; referring to this (http://en.wikipedia.org/wiki/Black_hat)or in a more pejorative manner, this (http://en.wikipedia.org/wiki/Cracker_%28pejorative%29) which was originally based on this (http://en.wikipedia.org/wiki/Georgia_cracker).
Well, here's an update. What I believe happened was that he somehow got into my ebay account. The account was linked to the yahoo email, whith the same password (bad idea, I know).
The guy ended up bidding and winning dozens of laptops, high end cell phones, and other fun items. He then emailed fake paypal payment notices, hoping someone would just send the item without logging in to paypal to verify their balance. It seems as though nobody was stupid enough to fall for that, but I'm still keeping an eye out for any packages that show up at my door.
I was eventually able to get Ebay and yahoo to reset my passwords. Ebay was great - they had already suspended the account for suspicious bidding. Yahoo made me jump through more hoops but eventually let me back in.
I now have very long passwords, with numbers and symbols, that are unique for each service. It's a hassle, but worth it.
Glad to hear that it all worked out. You may consider investing in a password bank such as this one (http://www.anypassword.com/) to help you maintain complex, changing passwords.
Captain Newbie
10-14-07, 10:00 PM
American slang; referring to this (http://en.wikipedia.org/wiki/Black_hat)or in a more pejorative manner, this (http://en.wikipedia.org/wiki/Cracker_%28pejorative%29) which was originally based on this (http://en.wikipedia.org/wiki/Georgia_cracker).
Correct.
When most stupid people news media and uninformed people say, "Hacker", they mean a black hat, or a cracker.
The pure(r) sense of the word means one who is well versed in working with computer systems.
American slang; referring to this (http://en.wikipedia.org/wiki/Black_hat)or in a more pejorative manner, this (http://en.wikipedia.org/wiki/Cracker_%28pejorative%29) which was originally based on this (http://en.wikipedia.org/wiki/Georgia_cracker).
Cool, thanks! :beer:
Yeah, within techie circles, "hacker" doesn't refer to anything illegal and is used as a compliment. People like Richard Stallman refer to themselves as hackers.
Adragontattoo
10-15-07, 08:27 AM
I know a few "hackers" personally.
One is paid by a University to do an 8 hour period of Penetration testing on all of their assorted systems. He doesnt have a set schedule, just has to work an 8 hour day.
The other is a "hacker" in the typical sense, he is paid by companies to pen test their site, systems and assorted from his home, he uses every trick in the book and some that arent in books. The guy is brilliant but he has the people skills of a small tree.
Captain Newbie
10-15-07, 10:36 AM
Yeah, within techie circles, "hacker" doesn't refer to anything illegal and is used as a compliment. People like Richard Stallman refer to themselves as hackers.
RMS is a stinky hippie, but I suppose he's a hacker...Linus and tglx and Ingo (Igno? I can never spell his name, but I *love* the scheduler...) are _definitely_ hackers...ESR is a hacker.
versus Kevin Mitnick, Kevin Poulsen, who are black hats.
etc.
MRD, you're a Portage hacker :D
Mr.Guvernment
10-16-07, 08:50 AM
lol good hackers hack one computer then hack into yours with that one so they don't get caught... lol i've read a few books about hacking
Unfortuantly most books on hacking are written by people who have no concept or base knowledge of the subject and think all hackers are bad people and couldnt tell you yhe diff between real hackers, script kiddies,crackers and all that other jazz!
as said this is some kid with a script he found (i had one for hotmail a trick login script redirector that would send me the login info and you wouldnt even know it) is easy to get and a joke to do, anyone can do it.
hackers are actually good people, but their rep has been tarnished, they often find explots and assist in fixing them, not doing any damage.
DorianBrytestar
10-16-07, 10:00 AM
Wait a minute, Project86 did you ever check your machine for spyware/virus/keyloggers?
Just because you got the passwords changed does not mean they could not still gain access if those are on your machine.
Mr.Guvernment
10-18-07, 01:18 PM
if you change nothing and they got in once they will get in again.
Richard Stallman and Linus Torvalds are two good examples of hackers, and they have done more for the computer community than anyone else I can think of. Unlike Bill Gates or Steve Jobs, they do what they do as a gift to humanity, not for profit. These are hardly the evil types that hackers are perceived to be.
vBulletin® v3.8.7, Copyright ©2000-2012, vBulletin Solutions, Inc.