[svlug] [OT] Mass Yahoo account compromise?

[Tim Utschig]

[link purposefully mangled]

On Fri, Sep 24, 2010 at 12:21:09PM +0000, andrewbfife at yahoo.co.uk wrote
(to volunteers at lists.svlug.org):
> hxxp://www.jarn.cpillsx.cxm


Interesting.  I received a nearly idential spam from my sister
today.  Different throwaway site which redirects to Canadian
pharmacy junk, 7 recipients extracted from her address book
rather than 8, and passed through official Yahoo servers.

I wonder if it's just a coincidence, or some mass compromise of
Yahoo accounts.

Some tweetosphere (or whatever people call it) traffic seems to
have spiked around the 20th-24th...

http://www.google.com/search?q=yahoo+compromised&tbs=mbl:1,mbl_hs:1283324400,mbl_he:1285916399
http://www.google.com/search?q=yahoo+account+hijacked&tbs=mbl:1,mbl_hs:1283324400,mbl_he:1285916399

http://twitter.com/ZephyrK9/status/25837695045

http://twitter.com/elitedevgroup/status/25409516403

(hmm, email from dead people...)
http://twitter.com/marcusjcarey/status/25180323869

-- 
   - Tim Utschig <tim at tetro.net>