I'm Spitting Flames - MSN/Hotmail Account Hacked

Discussion in 'Community' started by andym172, Sep 21, 2005.

  1. andym172 macrumors 6502

    Joined:
    Oct 24, 2003
    Location:
    UK
    #1
    My cousin has had her MSN/Hotmail account hacked by an 'admirer' of hers. It's not the first time this has happened, he gained access to her account a few months ago - reading and sending e-mail's to the people in her contact list.
    She's politely asked him not to, to which he promised he would not do it again, but he has and this time he's very much overstepped the line.

    My cousin does a lot of charity work for a local cancer charity and has won many awards, and been in many publications in the UK. She uses her e-mail address as her primary contact between her and those companies she's appealing to for help.
    This morning she received a number of stern replies to e-mail's she can't remember sending. It turns out that her admirer has sent abusive e-mail's to many of the people on her contact list, and has changed my cousins contact name to 'C**t Flaps'.

    There's a funny side to be seen here, but not when he's specifically sent the e-mail's in the hope of damaging her reputation. Those he sent the e-mail's to include heads of national companies and government official's (the wife of the lord mayor actually called my cousin) - relationships that have taken many years to build up.

    Understandably my cousin is mortally embarrassed. The first time it happened she laughed it off and simply changed her password. She's asked me how he's doing it - how has he hacked her address even when her passwords have been changed?
    She's now changed her e-mail address, but wants to keep the old one due to so many people knowing it.

    What I want to know is, given that I have HIS e-mail address, what can I do to him if he proceeds down this path again?

    He's obviously quite tech-savvy, so I'd like him to know that he's not the only one who can mess with others' e-mail accounts.

    If anybody can please PM me to say what measures can be taken, I'd be very appreciative :)
     
  2. dops7107 macrumors 6502a

    dops7107

    Joined:
    Mar 19, 2005
    Location:
    Perth, Oztrailya
  3. iGary Guest

    iGary

    Joined:
    May 26, 2004
    Location:
    Randy's House
    #3
    Yup, had that happen to me once. Hotmail no more.

    And not even the significant other knows any of my passwords. At all.
     
  4. Mord macrumors G4

    Mord

    Joined:
    Aug 24, 2003
    Location:
    UK
    #4
    ask if the password had any numbers in it, all mine do simple word passwords can be easyly cracked, and she really needs to get a proper email account, either by getting her own domain or at least use gmail, hotmail is just too unprofessional
     
  5. XNine macrumors 68040

    XNine

    Joined:
    Apr 7, 2005
    Location:
    Why are you wearing that stupid man suit?
    #5
    I tell you what you do to this guy, you knock on his door at 2 AM, when he opens the door you kick him in the nuts and smack him in the head with a golf club. You then tie him up, throw him inthe bath tub, and call twelve of your friends over to piss on him.

    It's subtle, I know, but I'm not in a violent mood today.
     
  6. jsw Moderator emeritus

    jsw

    Joined:
    Mar 16, 2004
    Location:
    Andover, MA
    #6
    Of course, social engineering might have been used to get the password.

    Bastard.
     
  7. BakedBeans macrumors 68040

    BakedBeans

    Joined:
    May 6, 2004
    Location:
    What's Your Favorite Posish
    #7
    tell her she needs to change her secret question, not just her password, she needs to make it a lot more secure by using numbers and letters (and nothing specific) and changer her secret question to something only she would know. like whats your favorite color and the answer being pickles55884 or something like that.

    nobody will get into that.

    its actually pretty easy to get into unless its really secure.
     
  8. mpw Guest

    Joined:
    Jun 18, 2004
    #8
    I've never used Hotmail but I have hacked into someones email account in a similar fashion but with good intentions.

    It was a Virginmail account and I simply clicked on Forgotton password? and found that the person had actually put the answer to "What's your mothers maiden name as their mothers maiden name". Bingo I was in.

    I didn't even jnow the guy, just his name and address. but googleing that got me an entry on a geneology site where he'd left a message giving his email account and a list of three names he was interested in. One was his, one his mom's maiden name (it turned out) and I'd guess the third was his wife's maiden name.

    What to do in your case? I'd go with the nuts and golf club idea or the Police.
     
  9. mpw Guest

    Joined:
    Jun 18, 2004
    #9
    Obviously. :p
     
  10. WildCowboy Administrator/Editor

    WildCowboy

    Staff Member

    Joined:
    Jan 20, 2005
  11. andiwm2003 macrumors 601

    andiwm2003

    Joined:
    Mar 29, 2004
    Location:
    Boston, MA
    #11
    police. absolutely call the police.

    these people not necessarily stop at hacking the e-mail. these people are out of control and can become dangerous.

    the fact that he mails to the ceo's shows that he's lost it and he crossed the line.

    in the moment the police can't do anything real. but when they talk to him it most likely is enough to scare him away for good. it sounds like it's an overreaction but maybe you can ask them to just call him and drop a few words. that is most likely enough.

    if he continues it's later much easier to get the police to do something about it since he's on record already.
     
  12. CanadaRAM macrumors G5

    CanadaRAM

    Joined:
    Oct 11, 2004
    Location:
    On the Left Coast - Victoria BC Canada
    #12
    First and most obviously -- you need to talk to hotmail security.
    You also need to get some complete copies of the offending mails, ncluding full headers.

    Secondly: Be very sure of what's going on. There is a possibility (unable to determine from the information provided) that her email account has NOT been hacked, but that she is the victim of either an email virus or a "Joe-Job"

    The fact that people she knows have received email with her return address does NOT mean that this email was actually sent from her account. Spammers commonly insert valid from: and reply-to: addresses in their spam, so that the mail gets through and any bounces or complaints go to some helpless other person. She may have just been unlucky enough to have a spammer select her address this week.

    Relatedly, more and more spam is sent via virus-infected machines; these will send out to everyone on their address book, using another person in the address book as the from: and reply-to:

    So if one of her contacts has her name in their addresses, plus others at other related orgs., then it is possible that some people she knows is receiving virus mail with her return address.


    Now depending on the email headers, Hotmail should be able to determine whether in fact it was sent BY her account, and therefore tell if it has been hacked.
     
  13. CanadaRAM macrumors G5

    CanadaRAM

    Joined:
    Oct 11, 2004
    Location:
    On the Left Coast - Victoria BC Canada
    #13
    Oh, and there is no way that anybody who is running a credible organization should be using a hotmail or yahoo address (or a .biz, or a .cn or .ru). I routinely ignore mail from any free webmail based service beacuse any scammer can sign up at no cost and with no ID.

    If her work is of any importance at all, she should be getting her own domain and moving all mail to that.

    see
    http://www.canadaram.com/spamselfdefense.html
     
  14. Applespider macrumors G4

    Applespider

    Joined:
    Jan 20, 2004
    Location:
    looking through rose-tinted spectacles...
    #14
    Go to the police would be my thought too. Even if they don't charge him, hopefully if they'll send a couple to loom over him, it might help him realise how serious it is.

    Assume your friend has sent a mail to all her contacts to explain the scenario and apologise; in some ways, it's so obviously out of character that hopefully most of her contacts will believe her.

    I'll second the 'get a decent email address' call though; I know that I rarely take any hotmail accounts seriously when they arrive in my work inbox asking for anything.
     
  15. notjustjay macrumors 603

    notjustjay

    Joined:
    Sep 19, 2003
    Location:
    Canada, eh?
    #15
    I've noticed too there are a number of sites that purport to tell you who's blocked you on MSN - all you have to do is feed your name and password into their web form. Hmmm.
     
  16. ChrisBrightwell macrumors 68020

    ChrisBrightwell

    Joined:
    Apr 5, 2004
    Location:
    Huntsville, AL
    #16
    ... What this guy did is hardly a hack. It's social engineering at best, criminal mischief at worst. Either way, it's not a hack.

    Send an email to his ISP and an email to MSN's customer service division. He is in violation of many terms of service, I'm sure.

    Ever heard the phrase, "Two wrongs don't make a right?" All you'll be doing is tossing a can of fresh fuel onto the fire and painting a big target on your back. I advise that you not stoop to his level of mischief.

    If you want to "get even", I suggest you take the proper route and report the problem(s) to the service providers involved (his ISP, the email service, etc). He agreed to a specific set of terms when he began using their services, so I'm sure they'll be glad to know that he's potentially in violation of one or more terms and, thus, in a breach of contract.

    His consequences will range between a written warning and a complete termination of service. I doubt you'll get any criminal charges, but you may be able to file civil charges for slander and/or defamation of character.
     
  17. ChrisBrightwell macrumors 68020

    ChrisBrightwell

    Joined:
    Apr 5, 2004
    Location:
    Huntsville, AL
    #17
    Having a false sense of security is often worse that having no security at all.
     
  18. andym172 thread starter macrumors 6502

    Joined:
    Oct 24, 2003
    Location:
    UK
    #18
    Thanks to all for the speedy replies :)

    Something I should have stated in my original post was that my cousin, and I would presume the 'admirer', are aged only 17 and go to the same school.

    This may go some way to explaining the immaturity of it all, and on the flip side show that it's not quite as dangerous as it may have first sounded, and is also why she doesn't have her own domain and instead uses a Hotmail account.

    As it is she's already signed up for a G-Mail account and is now going to use this as her primary address.

    Given he's only a school kid I feel contacting the police may be a little OTT. If, however, he's stupid enough to do it again I feel this may be the only option.

    I've copied all of the information in this thread, and also that given in the PM's I've been sent, and I'm going to e-mail her (G-Mail account! ;)). It's then up to her what she does.

    Thanks again for the help :)
     
  19. ChrisBrightwell macrumors 68020

    ChrisBrightwell

    Joined:
    Apr 5, 2004
    Location:
    Huntsville, AL
    #19
    Call his parents. Seriously.
     
  20. asif786 macrumors 65816

    asif786

    Joined:
    Jun 17, 2004
    Location:
    London, UK.
    #20
    cool, i was just going to say, pm me if you need an invite but looks like she's already got one. gmail rocks! (although, at the end of the day if your password or security question is guess-able it doesn't make a difference).

    one thing to remember guys - if you check gmail at an apple store, MAKE SURE you don't forget to sign out. i did that the other day and felt kinda stupid.. :rolleyes:
     
  21. XNine macrumors 68040

    XNine

    Joined:
    Apr 7, 2005
    Location:
    Why are you wearing that stupid man suit?
    #21
    Just because he's 17 doesn't mean he deserves any mercy. Hell, 17 year old kids commit crimes all the time and get tried as adults. So, that being said, your best bet to teach this little b@@@@@ a lesson is to piss on him. Eat lots of aspergus before hand too.
     
  22. ChrisBrightwell macrumors 68020

    ChrisBrightwell

    Joined:
    Apr 5, 2004
    Location:
    Huntsville, AL
    #22
    There's a difference between "mercy" and a responsible response to the situation as a whole.
     
  23. KALIF macrumors newbie

    Joined:
    Jun 26, 2005
    Location:
    Bangkok
    #23
    Like BakedBeans said; change "secret question" :)
     
  24. eva01 macrumors 601

    eva01

    Joined:
    Feb 22, 2005
    Location:
    Gah! Plymouth
    #24
    I would go to the cops, people need to learn things fast in life and having the cops knock on his door and take his computer away to inspect it for things would be a kick in the butt, even better if they found illegal content on it and he went to jail.
     
  25. snkTab macrumors 6502a

    snkTab

    Joined:
    Nov 13, 2004
    Location:
    Cincinnati, OH
    #25
    I agree, if this doesn't work I got a few ideas what you can put into a paper bag and leave burning at his doorstep.
     

Share This Page