If you use Yahoo

Please excuse the cross-post.

This may explain a few things that have been happening lately, including maybe Yahoo's redesign.


This is printed by request from another list I'm on.



I recently had a conversation with a friend of mine who happens to
be a very
good hacker. We were discussing the recent rash of groups being
closed on
yahoo after the group owner's id were hacked and I got some very
interesting
information I wish to pass on.

The hackers who delight in hijacking yahoo ids and passwords, rely
mainly on
an event that yahoo uses regularly to convince you to give up your
user id
and password. They utilize a fake yahoo signing page to get your
information.

We all on occasion, check out the profiles of various people we come
across
while in either chat, pm or groups. Many of us automatically reject
profiles
that are blank or have obvious links to spam or porn. However, we
will click
on links found in interesting profiles in order to find out more
about the
person.

So we click on one of the links on the profile and we are now faced
with a
Yahoo Sign-in page. We automatically assume that it's just yahoo and
we go
ahead and enter our user name and password and we click Sign-
in...sending
our user id and password to a pisher.

The following profile link has a link that will take you to a
phishing page.
The links is the second url listed.

http://profiles.yahoo.com/tanya_worships_black_rulers (yahoo profile)

http://www.geocities.com/tanya_worships_black_rulers/ (fake yahoo
Sign in
page)

Notice that this is a geocities .com page and not a Yahoo page. Only
a link
to a yahoo page, will bring up a Yahoo Sign in page which is now very
different in format.. Everytime you click on a link to a page
outside yahoo
and you get a Yahoo sign in page, check the adress bar to see what is
written there.

This is why many Group Owners as well as the ordinary yahoo users
are having
their yahoo accounts closed. Yahoo will not admit the problem, but
simply
state that there was a TOS violation that caused the deactivation of
the
account. They are correct, however, its not the owner of the account
who
violated the TOS..it's the hackers who have violated the TOS.

Please forward this information everyone you know with a yahoo
account.

 

Very cool info!

Thanks for the heads up Tandeer!


Todd
DF