Beware - received Yahoo IM phishing message around 4 pm today.
Received message from Stripedshire who is a friend of mine. Called him. He said that he received a similar message from one of his friends this morning, but was unable to log into the site link. Told him that I received message below just before 4 pm. He said that he has been away from his computer most of the day and is not accessing it now.
stripedshire: hey just asking, why did you put a sexy pics in your yahoo pics profile http://owned.name/1/yahoomainphoto im kinda shocked when I saw it. im just curious thats why im asking. (3:57 pm)
happypup_ny: Hi. just getting up. I didn't. Not to my knowledge. checking link now.
stripedshire: go here http://owned.name/1/yahooprofilepic ad sign in, and you will see the pics im taking about.
happypup_ny: ok
stripedshire: one sec be right back. (4:00 pm)
I thought it was suspicious because the address started out with "owned.name". Website it takes you too looks like a yahoo mail login site. But, the web addresses are not https:/login.yahoo.com/*, but http://www.yahoomainimage.2byehost7.com, and http://www.yahooprofpics2.byehost7.com respectively. Noticed grammar error "a sexy pics". And, I don't have any pics on my profile to begin with. Got message on my cell phone YIM, so went downstairs to my old mac. Google search identifies owned.name as a company out of Dallas.
Suggested that his YIM account might be compromised at this point, as he would have given this false site his username and password when attempting to log in. Suggested that he should attempt to log in from yahoo.com, and check out his profile (where notifications are sent - alternate e-mail addresses), and change his password - if he can still log into it.
Told him that I would put a warning up on LJ and facebook to give my friends a heads up and to try to warn our common friends on YIM.
Posting this publicly instead of friends only.
- Pup.
stripedshire: hey just asking, why did you put a sexy pics in your yahoo pics profile http://owned.name/1/yahoomainphoto im kinda shocked when I saw it. im just curious thats why im asking. (3:57 pm)
happypup_ny: Hi. just getting up. I didn't. Not to my knowledge. checking link now.
stripedshire: go here http://owned.name/1/yahooprofilepic ad sign in, and you will see the pics im taking about.
happypup_ny: ok
stripedshire: one sec be right back. (4:00 pm)
I thought it was suspicious because the address started out with "owned.name". Website it takes you too looks like a yahoo mail login site. But, the web addresses are not https:/login.yahoo.com/*, but http://www.yahoomainimage.2byehost7.com, and http://www.yahooprofpics2.byehost7.com respectively. Noticed grammar error "a sexy pics". And, I don't have any pics on my profile to begin with. Got message on my cell phone YIM, so went downstairs to my old mac. Google search identifies owned.name as a company out of Dallas.
Suggested that his YIM account might be compromised at this point, as he would have given this false site his username and password when attempting to log in. Suggested that he should attempt to log in from yahoo.com, and check out his profile (where notifications are sent - alternate e-mail addresses), and change his password - if he can still log into it.
Told him that I would put a warning up on LJ and facebook to give my friends a heads up and to try to warn our common friends on YIM.
Posting this publicly instead of friends only.
- Pup.