[PaQSO] Hijacked eMail Addresses
Pete
TwelveVDC at aol.com
Thu Aug 11 23:15:29 EDT 2011
I have found in many cases like these, (not all, but 90%+) the victim is an AOL client who has his password stored on the sign-in page, in order to save a step by not having to enter it each time you sign-on.
The folder this lies in, is the one that gets compromised by accomplished phishers, and you see the results all the time.
In every single instance like this I've encountered, I've successfully recommended that after changing the account password to something suitably strong and NEVER using that 3-second time-saving boobytrap again, the problem is never replicated.
Why anyone would want to store any type of password on the very machine they wish to protect is beyond me, anyway. It's akin to leaving your house key under the porch doormat, and astonished that someone would use it to break in.
Just my .02/$1 worth.
-Pete "The Greek" NL7XM
Amateur Radio Callsign Historian
More information about the PaQSO
mailing list