On 2014-02-24 12:05, Dave Beckstrom wrote:
I'm not on the smartertools forum but someone posted this:
"As I reported earlier, the three accounts I've had this problem with all
had Yahoo mail accounts as well, and there was a breach there in January. "
So my guess is the spammer obtained the person's yahoo password and then is
using that same password on the smartermail
I was scanning that forum, and working with the team to kill off the
spam that's flowing...
A counter to your theory (a good theory) is that at least one of the
admins report having changed the password on an account and seen it used
after the password was changed and before that password was disseminated
to the user.
That would _seem to mean_ there is some kind of authentication glitch in
SmarterMail that is being exploited.
_M
--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>