Skip Links

Network World

  • Social Web 
  • Email 
  • Close

(Comma separation for multiple addresses)
Your Message:

Watch out for e-mail hijack scams

User View By Chuck Yoke , Network World , 11/13/2007
  • Share/Email
  • Tweet This
  • Comment
  • Print

I received an interesting e-mail the other day. It was an advertisement for a Web site (i.e. spam) that supposedly offered Swiss watches for sale. Now I get a lot of this type of spam every day, but there was one thing that set this one apart – it was from me!

I displayed the full headers and discovered that the “reply to” field was actually another Yahoo account. I reported the spam to Yahoo, which promptly checked my account and discovered that a spammer was “hijacking” my e-mail address and copying it into the “From” header of the e-mail. Luckily Yahoo Customer Service assured me my account had not been accessed.

Yet even though my account was still secure, I was in a sense a victim of identity theft. While no personal or financial information has been accessed, the fact remains that someone out there is sending spam that appears to originate from me. Even though the incident has been reported, I am still getting occasional e-mails from ckyoke@yahoo.com advertising Top Quality Replica Watches.

And if I’m still receiving this spam, odds are other people are getting it also – and this is my concern. Who else out there is receiving an e-mail supposedly from me that directs them to a Web site that may contain malware, adware or spyware? How many of my friends, relatives, business acquaintances or previous contacts are being tricked by this?

Does the CIO I communicated with a year ago now have spyware on his computer because of an e-mail he thought was from me? Have some of my previous employees had potentially destructive code downloaded onto their PCs because they accessed a Web site they thought was mine? Are any of my business contacts about to have their credit card information stolen because they think they’re buying a watch that I am supposedly recommending?

My e-mail address is basically public information. It’s shown at the bottom of this column, printed on my personal correspondence, displayed on my business cards, easily obtained from any e-mail I ever sent, and accessible via a variety of Internet directory services.

And so is yours! Anybody who has ever sent an e-mail is conceivably at risk. Anyone reading this column could get an e-mail from themselves advertising replica watches.

This e-mail hijack is more of a nuisance than a threat when compared to the financial and personal risks associated with other types of identity theft, but it highlights how easy it is for someone to obtain – and abuse – your information.

  • Share/Email
  • Tweet This
  • Comment
  • Print
Comments (2)
Login
Forgot your account info?

RE: Watch out for e-mail hijack scamsBy Robert on November 14, 2007, 4:36 pmSpammers have been sending out e-mail messages with faked sender information for over a decade. While you may have been lucky enough not to have knowingly encountered...

Reply | Read entire comment

At least I'm not alone.By plgg1 on December 5, 2007, 3:17 pmI never got any spam up until September of 2007. And it was just one or two a day. I use AOL, so I just clicked the "Spam" button. It seems all the senders are random...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed