Jump to content


Webmail Account Hijacks


2 replies to this topic

#1 OFFLINE   Humpty

    Super Hero

  • Members
  • PipPipPipPipPip
  • 2,125 posts

Posted 06 August 2007 - 09:59 PM

Quote

Facebook, Yahoo!, Gmail or Hotmail account over a wireless connection just got a lot more dicey, as researchers here at the Black Hat hacker conference today demonstrated a new set of tools that help automate the hijacking of those accounts.

Demonstrating the tools before a standing-room only crowd, Errata Security Chief Executive Robert Graham scanned the Black Hat wireless network for anyone logging into their Gmail accounts. Applause erupted after Graham clicked on a link in the attack tool that allowed him to log in at the same time as the victim, displaying the contents of the poor guy's Gmail inbox on giant screens that flank the speaker's podium.
Article

#2 OFFLINE   Sockdown

    Advanced Member

  • Members
  • PipPipPip
  • 109 posts
  • Gender:Male
  • Location:The Caribbean
  • Interests:Computers, music and traveling

Posted 07 August 2007 - 01:34 AM

Nice article Humpty. I don't trust wireless connections even though they are encrypted. There's always a way around security.
public void dammit() {
damn.cmon(forYou);
damn.delete(You);
System.out.println("Mwuhahahaha");
}

#3 OFFLINE   Pfipps

    Advanced Member

  • Members
  • PipPipPip
  • 141 posts

Posted 16 August 2007 - 09:27 AM

Was the user logged in on the https setting? Everyone who has Gmail should just be sure to use https all the time.