Spell RPG

Gamevicio escreveu:Os usuários do hotmail devem trocar de senha urgentemente: segundo informam no neoWin, um usuário publicou no dia primeiro de outubro milhares de senhas do hotmail, msn e live no site de compartilhamento de código pastebin.com

.A lista deve ter sido distribuída pelo mundo todo e, ainda que a maioria delas são europeias, é recomendável fazer a troca de senha com urgência.

A equipe de segurança da Microsoft já conhece o problema, mas eles não podem fazer muita coisa se os usuários não trocam seus dados de acesso antes deles serem roubados.

Blog do NY times lá escreveu:October 5, 2009, 4:15 pm
Hotmail Passwords Stolen
By Riva Richmond


Someone posted login details for thousands of Hotmail e-mail accounts online over the weekend, in what appears to be only part of an enormous haul of stolen passwords netted in a phishing scheme.

Neowin today reported that on Thursday an anonymous user posted login details for more than 10,000 Hotmail accounts on pastebin.com, a site where software developers often share code. The list has been removed, but Neowin said the list showed accounts starting with the letters A and B, suggesting it is only a small slice of a much larger list. Addresses used @hotmail.com, @msn.com and @live.com domains.

Microsoft confirmed the list’s authenticity and said the details were stolen in a phishing scheme—not in any security breach of the company’s own systems—and is now scrambling to protect affected users. Phishing is large and growing problem on the Internet in which users are tricked into handing over their login details to unscrupulous actors. These schemes have become extremely sophisticated and often involve e-mail messages and Web pages that look like they come from legitimate companies but are entirely faked.

“Over the weekend Microsoft learned that several thousand Windows Live Hotmail customers’ credentials were exposed on a third-party site due to a phishing scheme,” the company said in an e-mailed statement. Spokeswoman Kate McGillem declined to provide details on the phishing attack the company believes caused the theft.

“We are working with affected customers to help them regain control of their accounts, and as part of this process, all affected customers will eventually have to change their passwords,” she said. “As a protective security measure, Microsoft recommends that all Hotmail customers change their Live ID passwords every 90 days.”

I wouldn’t recommend waiting for Microsoft. If you use Hotmail, go change your password and security question now. Remember that e-mail accounts are coveted by hackers because they can be used to find or reset passwords for other online accounts (including financial accounts), and contain lots of rich detail useful in identity-fraud schemes.

Microsoft also advises its customers “to exercise extreme caution when opening unsolicited attachments and links from both known and unknown sources” and to maintain up-to-date antivirus defenses.