[lug] Hacked e-mail accounts

[Davide Del Vento]

> But I'm still not clear on exactly how these accounts are being hacked.  Is
> someone cracking their passwords?  Finding a back door into Yahoo?  Grabbing
> them with a "man in the middle" attack?  Any ideas?

A friend had the same issue, but the hacker changed the password and
she has lost access to her yahoo email altogether (eventually she had
yahoo locking the account and stop the bad person, but the account was
lost). We suspect that they "just" cracked the password.

The attacker sent an email to the most-contacted contacts, with a
semi-realistic story (this friend often travel internationally, the
attacker claimed to be in Scotland - and of course needed money for an
emergency)

I'm sure this doesn't answer your question, but hopefully it adds a
piece to the puzzle.

Regards,
Dav