I have a board that everyone who posted their MSN on it got affected.
Although some were the results of phishing, I believe theres more to it.
My users are very computer friendly and well educated so I highly doubt their information could be phished. Some testimonials said that their passwords were really strong - including numbers and random letters.
I've personally emailed microsoft about it but didn't get back to me.
The hackings were aimed to get gaming accounts. I had to do some detective work and finally got the guy - banned him. However, he visited the site via a proxy and it took some time for me to get him. He was, I assume, looking for MSN email accounts via the memberlist, which I disabled. I also removed all MSN emails manually so people don't get hacked.
This was about 1 month ago.
|