About
Patrick O'Beirne's blog, Risk Management, Data Quality, Testing, Spreadsheet check and control
Patrick O'Beirne
Report any problems to
Subscribe
Subscribe to a syndicated feed of my weblog,
brought to you by the wonders of RSS.
Flavours
There's more than one way to view this weblog; try these flavours on
for size.
Links
raelity bytes - the author of blosxom
__________
__________
Wed, 13 Feb 2008
New Yahoogroup subscription hijack
I'm a moderator for a few Yahoogroups and I've noticed on one particular group that a new pattern has emerged.
I get a subscription to approve, and the email address looks genuine. But it is accompanied by an automatic reply email from the address with an "I'm out of the office" message.
Obviously spammers have realised that these addresses are genuine and can be used for a week or two, until the person returns, to attempt to get access to other lists of email addresses such as Yahoogroups.
On the other hand, unless they also have access to that email address to pick up the confirmation from YG, I don't see how they can access the group or retrieve any challenge email from the moderator - unless there's a way to sign in on the web using just an email address.