4 ms·
The last straw for me was having an account stolen after foolishly resetting the account password while on hotel wifi. No TFA, that part was my fault. The inve
by pandapower2 8y ago
The last straw for me was having an account stolen after foolishly resetting the account password while on hotel wifi. No TFA, that part was my fault.
The investigation took weeks and the final resolution was "the account is gone, the credit in it is gone, just create another account."
- drb91 8y agoWait, does that mean they do password resets over plain text?
- rrdharan 8y agoPresumably the commenter got tricked into giving up their credentials to a fake Skype phishing page served via a hacked/insecure/malicious WAP.
- pandapower2 8y agoUnknown. The reset was done by a family member so I can't be sure. They are pretty tech savvy and work in IT but who knows. If it was a phishing page it was presumably (hopefully?) a reasonably convincing one. The password reset happened two days into a seven day vacation. The account takeover happened while we were flying home. That the attacker waited until we were likely to be completely offline for several hours makes me suspicious that either hotel staff or staff at the hotel's Internet provider were involved. We have contacted the hotel but they seem uninterested.
- notatcomputer68 8y agoThat's clever! I wonder if they would go to all that effort just for a Skype balance. Maybe tried to use the Skype as a staging point for attacking other things?
- rwmj 8y agoWhen the Skype account of a friend of mine was taken over, it was used to DM spam links to all the contacts.
- domenukk 8y agoSimilar story here. My account wasn't stolen but merely used by a bot to send out spam to my business contacts. Afterwards the account was locked for good... What?