Tuesday, October 9, 2007

Myspace: Personal Phishing Request

After a long day of work, I came home and checked my vitals. I had one new message on Myspace, so I took a quick look.



I played along like a good 419 eater and pushed for more information.



The original sender quickly replied with the following two messages.





Thanks Bri, but no thanks.

As you know, non-technical people tend to use the same passwords across multiple accounts. So perhaps the target's Myspace password is the same as her Paypal account, or even her e-mail account. (Remember: Users log into Myspace with an e-mail and password).

Given access to a people's e-mail account....tons of other account hijackings option open.

Websites commonly e-mail forgotten passwords to a user's e-mail account (e.g., Password recovery option)

So, this user has been reported to Myspace...hopefully they take this minor request serious.

It is highly possible that this is a real person and she is having a little relationship issue with the target....but all in all it doesn't matter to me, I an’t doing it.

No comments:

Post a Comment