[CoLoCo] hi coloco

[Paul Hummer]

http://i.imgur.com/vWS5dfv.gif

No. Unless you have a malicious plugin installed or you haven't updated
your browser since 2004, javascript isn't the culprit. Based on the mail
headers, it looks like it originated on an android device. I'd check your
device for malware that is sending authenticated mail from your Yahoo mail
for Android app.


On Wed, Jan 30, 2013 at 5:00 PM, David Overcash <funnylookinhat at gmail.com>wrote:

> Most likely a clever JS hack - go ahead and clear your browser cache,
> login to your account and change your password, and you should most likely
> be all set.
>
> Cheers,
> David
>
>
> On Wed, Jan 30, 2013 at 4:53 PM, Paul Schwartz <pmjs1115 at yahoo.com> wrote:
>
>> I'm Ubuntu 12.04 and Firefox 18.0.1. I don't know how to find other
>> damage besides the attack on the Yahoo account. This is the first incident
>> I've had since starting to use Ubuntu 3 or 4 years ago.
>>
>> Any suggestions?
>>
>> Paul
>>
>>
>>   ------------------------------
>> *From:* Nick Post <nickjpost at gmail.com>
>>
>> *To:* Ubuntu Colorado Local Community Team <ubuntu-us-co at lists.ubuntu.com>
>>
>> *Sent:* Wednesday, January 30, 2013 2:34 PM
>>
>> *Subject:* Re: [CoLoCo] hi coloco
>>
>> I clicked on it but nothing happened for me. Fortunately, I did it from
>> an old PC I don't care about, but nothing so far.
>>
>>
>> On Wed, Jan 30, 2013 at 1:38 PM, David L. Willson <DLWillson at thegeek.nu>wrote:
>>
>> Emma: I'm assuming you clicked Paul's link. Unlike Google, I haven't
>> detected anything suspicious from you yet.
>>
>> Paul: I remain curious as to the browser & OS you used for clicking.
>>
>> --
>> David L. Willson
>> Trainer, Engineer, Enthusiast
>> RHCE Network+ A+ Linux+ LPIC-1 Ubuntu
>> Mobile 720-333-LANS(5267)
>>
>> This is a good time for a r3VOLution.
>>
>> ------------------------------
>>
>> Hi gang,
>> I clicked the link using Chromium on Ubuntu 12.10 and a few minutes later
>> was signed out of Google saying they detected unusual activity on my
>> account. I couldn't sign back in without using a verification code. If you
>> receive any emails from me with a link, it's not me sending it and I
>> apologize.
>>
>>
>> Emma Marshall
>>
>>
>>
>> On Wed, Jan 30, 2013 at 12:39 PM, Simon Engelbert <
>> engelbert.simon at gmail.com> wrote:
>>
>> Happens to the best of us. My yahoo account got hacked a few months ago
>> and spammed everyone here too :-/
>>
>> I too would be curious to know what OS/browser/etc you were on when you
>> clicked the link
>>
>> -Simon
>>
>>
>> On Wed, Jan 30, 2013 at 12:23 PM, Paul Schwartz <pmjs1115 at yahoo.com>wrote:
>>
>> I got hacked by a similar message from a friend. Just clicking on the
>> link did me in. Sorry guys. I really don't know how serious this is yet.
>>
>> Paul
>>
>>
>>   ------------------------------
>> *From:* David Overcash <funnylookinhat at gmail.com>
>> *To:* Ubuntu Colorado Local Community Team <ubuntu-us-co at lists.ubuntu.com>
>>
>> *Sent:* Wednesday, January 30, 2013 11:55 AM
>> *Subject:* Re: [CoLoCo] hi coloco
>>
>> I take that back... It just showed up for me.  ;-)
>> On Jan 30, 2013 9:53 AM, "David Overcash" <funnylookinhat at gmail.com>
>> wrote:
>>
>> Hey David -
>> I'm not sure we let this through, actually... I didn't receive it from
>> the list.  I'll dig into it a bit later on to see if we have to change some
>> settings on the list management.
>>
>> Cheers,
>> David
>>
>>
>> On Wed, Jan 30, 2013 at 9:51 AM, David L. Willson <DLWillson at thegeek.nu>wrote:
>>
>> Interesting, but ... Not Ubuntu, not even Linux, not even Free Software
>> ... So, why did you send the link to this list, Paul?
>>
>> (Normally, I would've thought spam, virus, or phishing attack, but the
>> target of the link didn't seem to be match any of those things.)
>>
>> --
>> David L. Willson
>> Trainer, Engineer, Enthusiast
>> RHCE Network+ A+ Linux+ LPIC-1 Ubuntu
>> Mobile 720-333-LANS(5267)
>>
>> This is a good time for a r3VOLution.
>>
>> ------------------------------
>>
>> hey have a look http://bit.ly/WAOSW4
>>
>>
>> Paul
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>>
>> --
>> [image: The Ubuntu Counter Project - user number # 34222]
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>>
>> --
>> Ubuntu-us-co mailing list
>> Ubuntu-us-co at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>>
>>
>
> --
> Ubuntu-us-co mailing list
> Ubuntu-us-co at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-us-co
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-us-co/attachments/20130130/916332f5/attachment.html>