- Is the Cisco MARS mission going to abort?
- First iPhone worm spreads Rick Astley wallpaper
- 10 stunning 3D buildings made with Google SketchUp
- Open source software ready for big business
- Four reasons to buy (and one reason to avoid) the Droid
I received an interesting e-mail the other day. It was an advertisement for a Web site (i.e. spam) that supposedly offered Swiss watches for sale. Now I get a lot of this type of spam every day, but there was one thing that set this one apart – it was from me!
I displayed the full headers and discovered that the “reply to” field was actually another Yahoo account. I reported the spam to Yahoo, which promptly checked my account and discovered that a spammer was “hijacking” my e-mail address and copying it into the “From” header of the e-mail. Luckily Yahoo Customer Service assured me my account had not been accessed.
Yet even though my account was still secure, I was in a sense a victim of identity theft. While no personal or financial information has been accessed, the fact remains that someone out there is sending spam that appears to originate from me. Even though the incident has been reported, I am still getting occasional e-mails from ckyoke@yahoo.com advertising Top Quality Replica Watches.
And if I’m still receiving this spam, odds are other people are getting it also – and this is my concern. Who else out there is receiving an e-mail supposedly from me that directs them to a Web site that may contain malware, adware or spyware? How many of my friends, relatives, business acquaintances or previous contacts are being tricked by this?
Does the CIO I communicated with a year ago now have spyware on his computer because of an e-mail he thought was from me? Have some of my previous employees had potentially destructive code downloaded onto their PCs because they accessed a Web site they thought was mine? Are any of my business contacts about to have their credit card information stolen because they think they’re buying a watch that I am supposedly recommending?
My e-mail address is basically public information. It’s shown at the bottom of this column, printed on my personal correspondence, displayed on my business cards, easily obtained from any e-mail I ever sent, and accessible via a variety of Internet directory services.
And so is yours! Anybody who has ever sent an e-mail is conceivably at risk. Anyone reading this column could get an e-mail from themselves advertising replica watches.
This e-mail hijack is more of a nuisance than a threat when compared to the financial and personal risks associated with other types of identity theft, but it highlights how easy it is for someone to obtain – and abuse – your information.
Comments (2)
RE: Watch out for e-mail hijack scamsBy Robert on November 14, 2007, 4:36 pmSpammers have been sending out e-mail messages with faked sender information for over a decade. While you may have been lucky enough not to have knowingly encountered...
Reply | Read entire comment
At least I'm not alone.By plgg1 on December 5, 2007, 3:17 pmI never got any spam up until September of 2007. And it was just one or two a day. I use AOL, so I just clicked the "Spam" button. It seems all the senders are random...
Reply | Read entire comment
View all comments