My family never really listens to me when I talk about security related topics, but now my sister regrets it. She had a simple password (since has been changed) and I believe they used a dictionary attack to get into the account. Once in they sent an e-mail to everyone in her account for a website. Then they deleted all of her contacts (I was able to get those back). But the real kicker that she couldn't figure out was whenever she would send herself an e-mail it would send the spam e-mail back to her. She got home and I took a look, what they do is setup a out of office reply that contained the spam e-mail. We got everything back and cracking, but just wanted to warn anyone who uses Yahoo!....
Here is the e-mail that is sent:
hi:
New shopping new life!
How are u doing these days?Yesterday I found a web of a large trading company from china,which is an agent of all the well-known digital product factories,and facing to both wholesalers,retailsalers,and personal customer all over the world. They export all kinds of digital products and offer most competitive and reasonable price and high quality goods for our clients,so i think we you make a big profit if we do business with them.And they promise they will provide the best after-sales-service.In my opinion we can make a trial order to test that.
Look forward to your early reply!
REMOVED SPAM CONTACT INFORMATION
