Hackful Thoughts

VN:F [1.9.22_1171]
Rating: 5.4/6 (1 vote cast)

Me: Our site has been hacked again, we have been informed by Google….

Admin: Really? I think all these hackers are little ugly guys who love to destroy nice sites…

Me: I don’t think so. They wear single-breasted suits and earn a lot of dirty money.

Admin: Money? By putting malware on other people’s sites? Bastards!

Me: No really. They are paid by enterprises to advertise, so they hijack websites and bring visitors to other sites. The malware often infect the attacked site in such a way, that the site collapses, but it still sends out tons of spam.

Admin: Those hackers are criminals!

Me: Sure. And those who pay them, too.


VN:F [1.9.22_1171]
Rating: 0 (from 0 votes)

Why does Yahoo lie about Hackers abuse Yahoo-Accounts?

VN:F [1.9.22_1171]
Rating: 4.3/6 (5 votes cast)

Quite nice what I learned this morning – an inactive Yahoo-account of mine was sending spam! After I reactivated the account by using my phone-number and checked… First I deleted all contacts and changed the password. Then I checked the header of the spam-messages:

Received: from [xxx.xx.xx.xx] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 12 Mar 2013 09:51:43 -0000
Received: from [] by omp1022.mail.ir2.yahoo.com with NNFMP; 12 Mar 2013 09:51:43 -0000
X-Yahoo-Newman-Property: ymail-3

NNFMP is an e-mail transfer protocol used internally at Yahoo. However, Yahoo has publically stated that it does not exist!
Yahoo uses this protocol to internally route email traffic across their network. The acronym stands for “Newman No-Frills Mail Protocol”. It`s a simple, high-performance protocol comparable to QMTP. Read more here: http://en.wikipedia.org/wiki/Yahoo!_Mail

The IP is a ‘Localhost’ which means it is “this computer”. Since the header states: [] by omp1022.mail.ir2.yahoo.com it cannot me MY computer.

Yahoo states that these spams come from hacked computers. Yes, that is right. In this case it is Yahoo that was hacked.

VN:F [1.9.22_1171]
Rating: +3 (from 5 votes)