Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Yahoo warning users that hackers forged cookies to access accounts

16 Feb 2017   #1
Brink

64-bit Windows 10 Pro
 
 
Yahoo warning users that hackers forged cookies to access accounts

Quote:
Yahoo is warning some customers that state-sponsored attackers have accessed their accounts by using a sophisticated cookie forging attack, which doesn't require obtaining user passwords.The notice is a continuation of the company's response to a series of historic data breaches announced last year.

An email from Yahoo forwarded to ZDNet said:

"Our outside forensic experts have been investigating the creation of forged cookies that could allow an intruder to access users' accounts without a password. Based on the ongoing investigation, we believe a forged cookie may have been used in 2015 or 2016 to access your account."

A handful of others on Twitter also confirmed they had received an identical email notification.

Yahoo confirmed the notifications were genuine.

"The investigation has identified user accounts for which we believe forged cookies were taken or used. Yahoo is in the process of notifying all potentially affected account holders," a spokesperson confirmed...


Read more: Yahoo warning users that hackers forged cookies to access accounts | ZDNet


My System SpecsSystem Spec
.
16 Feb 2017   #2
SherriBabee

Win7 Home Premium x64
 
 

Exactly why I got rid of my Yahoo account back last Fall/Winter. Didn't want to chance it and besides really haven't used it over the years.

Tks 4 sharing that article Brink
My System SpecsSystem Spec
17 Feb 2017   #3
lehnerus2000

W7 Ultimate SP1, LM18.2 MATE, W10 Home, #All 64 bit
 
 
Too Late Now

Too late for me.

Hackers must have downloaded all of the emails in one of my accounts (back in 2014?).
I just got an email (using my name) from some site called "pchome.com.tw".

It was also sent to all of people that I have received emails from (up to 2015).
None of the recent email addresses (from new correspondents) were in the recipients list, which is why I think that they must have acquired the emails several years ago.

I wonder why they waited so long to use them?
My System SpecsSystem Spec
.

20 Feb 2017   #4
soho1

 

Where can we learn what this forging is and what countermeasures can be taken against it? Is this unique to Yahoo, or a web account problem of a more general nature?

Oh, I see...
Yahoo: One Billion More Accounts Hacked — Krebs on Security
My System SpecsSystem Spec
23 Feb 2017   #5
BlueGuy

W7 Ultimate 32-bit
 
 

Never used yahoo except as 'play' email accounts so far no more spam than usual, have separate .org accounts for business only use, except for the Ashley Madison boondoggle in which that account was three jobs and two cities ago. So all the hackers got there was very obsolete info on me from what is practically the dark ages, net wise. Only the odd extortion attempt which was forwarded to the real FBI and a counter-threat to the would-be extortionist that I hoped that a black-ops team would come to knock his door down and kill his n- ass! Peace ever since. All you gotta do is set Thunderbird or Navigator[if anyone still uses it] or any other to view message source code, then you can read where it originally came from and whether anon mail services were used. If the latter, there are ways to find the true origins, but that's for another time.

BTW Yahoo keeps bugging me via the one email addy to change the pw, but already did that ages previous to their reminders.
My System SpecsSystem Spec
Reply

 Yahoo warning users that hackers forged cookies to access accounts




Thread Tools




Similar help and support threads
Thread Forum
PHP warning Yahoo web hosting scipts log
Greetings, When the URL is clicked the scripts log generates this warning. PHP Warning: Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0 I have been unable to find the cause of the warning. I also...
General Discussion
Link between BT and Yahoo email accounts
I have upgraded my Yahoo email account today to a paid account. I use BT Broadband so previously had (have ?) a free BT Yahoo Email Account. When I open Yahoo.com and click on mail I still get BT Yahoo Mail. Are these inseparable ?
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:50.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App