Nite Posted September 30, 2003 Report Share Posted September 30, 2003 A friend of mine is unfortunate enough to have had some sort of security breach in his msn messenger. His account was cracked somehow and he's not sure how. He tried connecting to his account and was informed that his password was not valid, so he logged on with a secondary name and password. Lo and behold, he saw his name as being online and was informed by the person using his account, that it has been hacked. My question is, aside from having a keylogger secretly installed on his pc, is there another exploit that can be used to do this? My friend also informed me that after he logged off and logged in again, about 2 hrs later, his second account had been hacked as well. Any info would be much appreciated. :( Oh yes, he told me that as he chatted with the thief, the cracker gave him back his password twice. As my friend logged on and changed his password, he found that after he logged off and on again, the same thing happened. My friend also informed me that he asked someone else with a different pc to log on to his account.. and that person was successfull.. I realy don't understand how his friend could log on but he couldn't???? Quote Link to comment Share on other sites More sharing options...
Redhat Posted September 30, 2003 Report Share Posted September 30, 2003 Having a weak password or secret question is probably a major possibility. There was a vulnerability in Hotmail months ago, it was sharply patched up. Example of good password (if Hotmail allows symbols) : ur743@"£$hjdExample of good password (if Hotmail does not) : uR743H8dExample of bad password : johnnyAs for the secret question.. don't use the correct answer when setting it, use random keyboard strokes, and remember the password. Quote Link to comment Share on other sites More sharing options...
Nite Posted September 30, 2003 Author Report Share Posted September 30, 2003 Thanx for the reply. I'll suggest it to him and see if it makes a difference. :) Quote Link to comment Share on other sites More sharing options...
Guest nellie2 Posted October 1, 2003 Report Share Posted October 1, 2003 I am by no means an expert on security but is there a possibility that your friend has a trojan on his system??Go here to do an on line scanhttp://www.trojanscan.com/PS......... thanks to Inprofile I nicked that link from your signature :) Quote Link to comment Share on other sites More sharing options...
Nite Posted October 1, 2003 Author Report Share Posted October 1, 2003 There doesn't seem to be any trojan involved.. at least none that any online scans could detect. As for the sig.. yeah it upsets ppl to see their IP online... but it only returns the IP to the user viewing it. If 20 ppl were to view it, each would only see their own IP. No one else can view anothers IP. It's not a precompiled hack program but a simple script that allows the pc to see itself. :) Quote Link to comment Share on other sites More sharing options...
Guest nellie2 Posted October 1, 2003 Report Share Posted October 1, 2003 I'm sorry Nite, I think you misunderstood about the signature comment.Inprofile is one of our members see herehttp://www.windowsforum.org/support/forum/...hp?showuser=403when I said that I nicked the link from his signature I meant that I took the link for the on line trojan scanner from his forum signature which is the writing that you see at the bottom of each post. Quote Link to comment Share on other sites More sharing options...
Nite Posted October 1, 2003 Author Report Share Posted October 1, 2003 oh- ok.. as a matter of fact, now that I think about it, i never did use that sig here.... my bad. Quote Link to comment Share on other sites More sharing options...
Guest nellie2 Posted October 1, 2003 Report Share Posted October 1, 2003 Nite started another thread which I have had to remove..... but he worked out how the MSN account was hijacked and it is all down to your secret question. So the advice is to make your secret question as difficult as possible... in fact follow Redhats advice which you will find a couple of posts up this thread. :) Quote Link to comment Share on other sites More sharing options...
Chris Posted October 1, 2003 Report Share Posted October 1, 2003 What sig ;) Quote Link to comment Share on other sites More sharing options...
Guest nellie2 Posted October 1, 2003 Report Share Posted October 1, 2003 He is probably on about that big green monster you have sitting in your sig Powerless!! Quote Link to comment Share on other sites More sharing options...
Nite Posted October 2, 2003 Author Report Share Posted October 2, 2003 Yeah.. that's the sig......danasoft.com, right? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.