The Latest in IT Security

AOL Probes Breach Allowing Hackers to Spoof Email

28
Apr
2014

WASHINGTON – AOL said Monday it had launched an investigation with federal authorities into a security breach that allowed hackers to gain access to around two percent of its email accounts.

The probe began “following a significant increase in the amount of spam appearing as ‘spoofed emails’ from AOL Mail addresses,” the Internet company said in a statement.

Spoofing is a tactic used by hackers to make it appear that the message is from an email user known to the recipient in order to trick the recipient into opening an attachment which may contain malware, AOL noted.

“AOL’s investigation is still underway, however, we have determined that there was unauthorized access to information regarding a significant number of user accounts,” the statement said.

“This information included AOL users’ email addresses, postal addresses, address book contact information, encrypted passwords and encrypted answers to security questions that we ask when a user resets his or her password, as well as certain employee information.”

The company added that “we believe that spammers have used this contact information to send spoofed emails that appeared to come from roughly two percent of our email accounts.”

AOL said it was working with “best-in-class external forensic experts and federal authorities to investigate this serious criminal activity.”

The statement said it was not known whether the encryption on passwords or answers to security questions was broken, but that “as a precautionary measure, we nevertheless strongly encourage our users and employees to reset their passwords used for any AOL service.”

Tweet

© AFP 2013Previous Columns by AFP:AOL Probes Breach Allowing Hackers to Spoof EmailInternet Co-creator Cerf Debunks Myth That US Runs ItFBI Informant Linked to Hacking of Foreign Websites: ReportBitcoin Exchange MtGox to Start Liquidation ProcessBrazil Hosts Meeting to Craft Internet Governance Rules

sponsored links

Tags: NEWS INDUSTRY

Email Security

Tracking Law Enforcement

Cybercrime

Comments are closed.

Categories

MONDAY, DECEMBER 17, 2018
WHITE PAPERS

Mission-Critical Broadband – Why Governments Should Partner with Commercial Operators:
Many governments embrace mobile network operator (MNO) networks as ...

ARA at Scale: How to Choose a Solution That Grows With Your Needs:
Application release automation (ARA) tools enable best practices in...

The Multi-Model Database:
Part of the “new normal” where data and cloud applications are ...

Featured

Archives

Latest Comments

Social Networks