List Of 10033 Phished Hotmail Account Passwords Posted Online, Still Available In Google’s Cache
Neowin.net has reported regarding a possible Windows Live Hotmail “hack” or phishing scheme where password details of thousands of Hotmail accounts have been posted online.
An anonymous user posted details of the accounts on October 1 at pastebin.com, a site commonly used by developers to share code snippets. The details have since been removed but according to Neowin, the accounts are genuine and most appear to be based in Europe. The list details over 10,033 accounts starting from A through to B, suggesting this is only a part of a bigger list. Currently it appears only accounts used to access Microsoft’s Windows Live Hotmail have been posted, this includes @hotmail.com, @msn.com and @live.com accounts. Some accounts are from @hotmail.fr, @live.it, few from @yahoo.es.
Neowin has reported this immediately to Microsoft’s Security Response Center and to Microsoft’s PR teams in the UK and US and we are currently awaiting feedback on the situation. As this is a breaking story, updates by Neowin can be found here.
If you are a Windows Live Hotmail user Neowin recommends that you change your password and security question immediately.
According to Neowin, Microsoft has fully confirmed their initial reports. According to a Microsoft spokesperson “over the weekend Microsoft learned that several thousand Windows Live Hotmail customer’s credentials were exposed on a third-party site due to a likely phishing scheme. Upon learning of the issue, we immediately requested that the credentials be removed and launched an investigation to determine the impact to customers. As part of that investigation, we determined that this was not a breach of internal Microsoft data and initiated our standard process of working to help customers regain control of their accounts.”
Unfortunately, according to our check, the list can still be found in Google’s cache, here is the screenshot:
Google has already been contacted by CyberInsecure in order to remove the cached page from search results.
UPDATE: Google removed cached page after about 3 hours.
More on CyberInsecure:
Print This Post
Posts
April 8th, 2011 at 7:27 am
can you upload the emails so i can see because my friend said my email address was there do u know where i can see more pictures?