-
Sophisticated Hotmail hijacking with DropBox message re-routes
Scary message from SC:
On June 17, I discovered my Hotmail had been hacked probably because of the theft of close to 300 million passwords from Hotmail, Gmail, and Yahoo back in May. Whoever hacked me on the 17th was very clever and since I was out of town, it took me 2 days to see what they did. They had also changed my passwords on FaceBook, Evernote, and DropBox all of whom sent out emails saying my password had changed including Hotmail.
I was able to reset my password for all of those services except for DropBox. I was away when this happened so I was using my iPad for email and did not use the website at Outlook.com to retrieve mail.
When I arrived home yesterday I decided to look at the Outlook options to see if Dropbox had been accidentally added to the blocked senders list; it hadn’t. I then looked at the sorting rules for incoming mail and found about 8 new filters that sent various domain names to my deleted folder. One of those was DropBox. I found all the password reset emails from DropBox in my deleted folder which I did not see on my iPad because that is one of the folders that I do not sync.
I had never heard of a hacker adding filters to email to prevent users from seeing the email that would reset their passwords via a lost password reset email.
SC adds: In addition to the above, they put a filter in my gmail account which is backup to my hotmail account and set a filter to put anything from Microsoft into my gmail trash and mark it as read. In effect, they are making things so that I think I never got my password reset link from Microsoft.