Guestbook | Contact me
My Life   My Family   My Friends   My Work   My Photos   My Blog   My Twitter	Javascript UNEscape Page   This page checks for the Yahoo spoof (fake email scam) that asks you to verify that your account has been created by a "real" person by clicking on the URL provided in this email. Last Update 1-Nov-2004 @ 14:30 EST: Now everyone and their best friend is carrying a news article on this issue. Looks like this email scam is being used to create new Yahoo registrations and uses you to go through with Yahoo's human-only-readable image security measure. See end of this page for links to news articles. I blogged about this error/spam/spoof/security hole on Logic2go.com (view blog entry) Recently, I've been bombarded by emails to my yahoo account supposedly from my OWN yahoo account (from me, to me). The text of the email is ... Dear Yahoo Member, We must check that your Yahoo! ID was registered by real people. So, to help Yahoo! prevent automated registrations, please click on this link and complete code verification process: http://es.rd.yahoo.com/*ht%74%70:%2f/%57%77%77%2E%09gOo%67%6C%65%2E%09%43O%6D%2f%75r%6c%3Fq=ht%74%70%3A%2f/w%57w.g%4f%09O%09Gl%0 [Truncated] Thank you. Of course, if you use Javascript and unescape this sequence, you see how a flaw in Yahoo's website allows you to get redirected to google, AND then a flaw on google's site further sends you to a website in Russia (something.da.ru). If you click on that link your email address will be verified and possible used in spam lists. I am not sure if this is some way hijacks your yahoo account (Gmail cookies were hi-jacked recently). If you got such a mail recently, then you can check this URL by entering it below ... Enter the copied URL text here: This scam would not have been very successfuly except for a security hole in Yahoo's website at http://es.rd.yahoo.com/ News sites carrying articles about this Spam scam The Register.co.uk ZDNet.com VNUNet.com My Work   My Blog Research & Articles Live Projects Upcoming Projects
My Life | My Family | My Friends | My Work | My Photos | My Blog | My Twitter Home | Guestbook | Contact me | Site Map (c) 1980-2024 Vinit Bhansali. All Rights reserved. This work is licensed under a Creative Commons License.