Page 1 of 2 12 LastLast
Results 1 to 10 of 15

Thread: my girlfriend got her yahoo account hacked. suggestions?

  1. #1
    Junior Member
    Join Date
    May 2007
    Posts
    3

    my girlfriend got her yahoo account hacked. suggestions?

    so my girlfriend has a yahoo account and someone has hacked into and gone through her emails looking up the "activation email" when you first sign up to a site. (you know, the email that tells you that your account is now active and lists your username and password). so this guy went into her myspace, facebook, livejournal, paypal, and modelmayhem account and deleted them all.

    we think it may have been a myspace phishing thing because she's had to change her myspace password in the past because of spam bulletins. but it could also be a pissed off ex-boyfriend. we're not sure. :-/

    so we called the yahoo tech support and all they could tell us is that the account is still active. she forgot her "secret question" so they refuse to help her even though her account is still being used without her permission.

    we've been emailing the tech support for the sites, and so far we've recovered the livejournal account. but that's it. any suggestions on what to do to recover her email?

  2. #2
    Senior Member JPnyc's Avatar
    Join Date
    Jan 2005
    Posts
    2,734
    Yahoo are really the only ones who can help with this.

  3. #3
    Junior Member
    Join Date
    Mar 2006
    Posts
    11
    if it's that's much trouble, why not just cut your losses, and recreate all the myspace, facebook, livejournal, paypal, and modelmayhem accounts? I mean if it is an ex boyfriend wouldn't it be wise to just start anew with most of the same friends. that way it wouldn't be as easy for him to find your girlfriend. As the saying goes: "On the internet, no one knows you're a dog."
    *Those who trade freedom for security deserve neither *

  4. #4
    Member
    Join Date
    Sep 2006
    Location
    At a keyboard
    Posts
    82
    A few things you might want to do is check the PC's she uses to access those sites for any type of trojan, key loggers, rootkits, etc etc. You might want to beef up the browsers security settings as well, so to speak. Low security settings make it more likely to fall victim to cross site scripting attacks, which honestly are one type of attack that still rattles my nerves. If public computers were used to access the sites that were compromised, you might want to not use them to access personal information in the future, theres no way for you to tell whats been done to a lab computer before you got there. Same goes for public wifi, you have to be aware of the possibility of evil twins.

    Nobody but yahoo can fix her yahoo mail. Sorry. Best I can offer is some advise that may help you have a safer experience on the net in the future.
    "I have died, I will die, It's alright, I don't mind"

  5. #5
    Disgruntled Postal Worker fourdc's Avatar
    Join Date
    Jul 2002
    Location
    Vermont, USA
    Posts
    797
    First thing I'd do is set up another email account with another provider (Gmail maybe). Then email all of her friends thjat she can get a hold of explaining the hack and her new email addy.

    Then she could recreate the other accounts but this time use a different password for the accounts.

    An old hack from the bbs days was to set up a bbs. Offer something that people have to log on for. Try to get them to list other boards they visit because usually they will use the same username and password. Then you harvest the username and password fro your bbs and have fun on their accounts.

    I don't know how many times I've connected to someone else's email account on a public computer because they failed to log out correctly. All I had to do was connect to the provider and voila, I'm logged in and they could have pwned.
    ddddc

    "Somehow saying I told you so just doesn't cover it" Will Smith in I, Robot

  6. #6
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Hi and welcome to AO.

    You will not get much help out of Yahoo! because they do not give a damn. You are not paying them anything, and free services are not well supported.

    When you subscribe to a service be sure to print out or write down all the account details, and keep them in a safe place.

    When you get a confirmation, print it out and save it to a secure folder on your hard drive then delete it from your mailbox.

    so this guy went into her myspace, facebook, livejournal, paypal, and modelmayhem account and deleted them all.
    How do you know it was a guy?

    If there was a balance on the paypal account then you are looking at a felony offence. Report it to the police as they will not have difficulty in getting the logs from the service providers and may be able to trace the culprit.

    In any event, their enquiry will demonstrate that you are genuine, rather than trying some social engineering scam. It will also cover you if any of these accounts are used for malicious or illegal purposes

    ddddc:

    I don't know how many times I've connected to someone else's email account on a public computer because they failed to log out correctly.
    Actually that is probably not true. people forget about the MRU records and session cookies.

    The real culprits are the service providers who do not manage sessions properly, sometimes leaving them open for hours if not days after the user has logged off. Anyone coming along later can continue with that session as no re-authentication is required.

  7. #7
    Junior Member
    Join Date
    May 2007
    Posts
    3
    Quote Originally Posted by nihil
    Hi and welcome to AO.



    If there was a balance on the paypal account then you are looking at a felony offence. Report it to the police as they will not have difficulty in getting the logs from the service providers and may be able to trace the culprit.

    In any event, their enquiry will demonstrate that you are genuine, rather than trying some social engineering scam. It will also cover you if any of these accounts are used for malicious or illegal purposes
    no money was actually taken out of her paypal. it was not really activated, but her credit card information is still on there. either it was deleted or the person changed the password. we're not sure.

    but the person sent an taunting email from the email he hacked saying "how do you feel about this?" to her alternate email. and because it's yahoo, i now have his IP address and i tracked it to a computer in new jersey.

    but no money has been taken or anything. however, he has gone into her accounts and has tried to humiliate her by changing her profiles and has been sifting through her journal and private emails.

    since yahoo obviously won't help us, is there anything else we could do to stop this person from trying to humiliate her? or will she just have to delete everything she's every signed up with on that email? this type of harassment seriously can't be legal, can it?
    Last edited by AASteveo; May 23rd, 2007 at 10:43 PM.

  8. #8
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    since yahoo obviously won't help us, is there anything else we could do to stop this person from trying to humiliate her? or will she just have to delete everything she's every signed up with on that email? this type of harassment seriously can't be legal, can it?
    1. Report it to your state cybercrimes team.

    2. Yes she will have to start afresh, hopefully having taken the advice given here.

    3. That would depend on your laws.

    Basically you have no evidence of a felony and have suffered no material loss, as these were free accounts.

    The harassment and "cyberstalking" bit may have some mileage in it, but there do not seem to have been any threats?

    The IP address you have (in NJ) is useless, so you might as well forget it.

    My advice would be to learn the lesson and move on. You would have a better chance of getting him busted for tossing a candy wrapper on the pavement, and I mean that! Cybercrime is the most under resourced area of law enforcement Worldwide, not just in the USA

  9. #9
    Junior Member
    Join Date
    Apr 2003
    Posts
    1
    (so this guy went into her myspace, facebook, livejournal, paypal, and modelmayhem account and deleted them all. )

    SEEMS LIKE HE IS WAY SMARTER THAN YOU.

    (we think it may have been a myspace phishing thing because she's had to change her myspace password in the past because of spam bulletins. but it could also be a pissed off ex-boyfriend. we're not sure. :-/ )

    AS LONG AS YOU ARE NOT SURE ,YOU NEED NOT WORRY ABOUT THE BF.ELSE JEALOSY MAY CAUSE YOUR MIND SOME HARM.

    (so we called the yahoo tech support and all they could tell us is that the account is still active. she forgot her "secret question" so they refuse to help her even though her account is still being used without her permission. )

    OK YAHOO SHOULD HAVE HELPED.

    we've been emailing the tech support for the sites, and so far we've recovered the livejournal account. but that's it. any suggestions on what to do to recover her email?

    POST THE EMAIL RIGHT HERE.YOU HAVE TO FIND SOME ONE SMARTER THAN HIM TO CRACK IT AND GIVE IT TO U .



    [/QUOTE]
    ANAND

  10. #10
    anandovski please don't post to a 2+ month old thread with bullshit answers that a kid with an IQ of 5 could've thought of....thanks
    O.G at A.O

Similar Threads

  1. Windows Error Messages
    By cheyenne1212 in forum Miscellaneous Security Discussions
    Replies: 7
    Last Post: February 1st, 2012, 02:51 PM
  2. Someone hacked my yahoo account and has my password now??
    By Pootie in forum Newbie Security Questions
    Replies: 34
    Last Post: October 12th, 2006, 12:55 AM
  3. Funny but serious help w/ yahoo account
    By wildbill990 in forum AntiOnline's General Chit Chat
    Replies: 1
    Last Post: November 9th, 2004, 06:35 AM
  4. Has anyone seen this SSH Scanner tool?
    By MrLinus in forum Miscellaneous Security Discussions
    Replies: 15
    Last Post: October 28th, 2004, 04:29 PM
  5. Are Hotmail And Yahoo! Blocking Gmail Invites?
    By yourdeadin in forum AntiOnline's General Chit Chat
    Replies: 12
    Last Post: September 16th, 2004, 10:55 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •