AOL probes breach allowing hackers to spoof email

April 28, 2014
AOL said Monday it had launched an investigation with federal authorities into a security breach that allowed hackers to gain access to around two percent of its email accounts

AOL said Monday it had launched an investigation with federal authorities into a security breach that allowed hackers to gain access to around two percent of its email accounts.

The probe began "following a significant increase in the amount of spam appearing as 'spoofed emails' from AOL Mail addresses," the Internet company said in a statement.

Spoofing is a tactic used by hackers to make it appear that the message is from an email user known to the recipient in order to trick the recipient into opening an attachment which may contain malware, AOL noted.

"AOL's investigation is still underway, however, we have determined that there was unauthorized access to information regarding a significant number of user accounts," the statement said.

"This information included AOL users' email addresses, postal addresses, address book contact information, encrypted passwords and encrypted answers to security questions that we ask when a user resets his or her password, as well as certain employee information."

The company added that "we believe that spammers have used this contact information to send spoofed emails that appeared to come from roughly two percent of our ."

AOL said it was working with "best-in-class external forensic experts and to investigate this serious criminal activity."

The statement said it was not known whether the encryption on passwords or answers to security questions was broken, but that "as a precautionary measure, we nevertheless strongly encourage our users and employees to reset their passwords used for any AOL service."

Explore further: Yahoo email account passwords stolen (Update 2)

Related Stories

Yahoo email account passwords stolen (Update 2)

January 30, 2014

Usernames and passwords of some of Yahoo's email customers have been stolen and used to gather personal information about people those Yahoo mail users have recently corresponded with, the company said Thursday.

Hackers sock smartphone earpiece star Jawbone

February 13, 2013

Jawbone on Wednesday warned users of its earpieces and Jambox speakers that hackers stole names, email addresses and encrypted passwords from accounts used to make the wireless devices smarter.

Germany says 16 mn email accounts compromised

January 21, 2014

German authorities said Tuesday the digital identities of 16 million online users had been stolen, compromising their email accounts, linked social media and other services.

Recommended for you

Google, EU dig in for long war

July 20, 2017

Google and the EU are gearing up for a battle that could last years, with the Silicon Valley behemoth facing a relentless challenge to its ambition to expand beyond search results.

Strengthening 3-D printed parts for real-world use

July 20, 2017

From aerospace and defense to digital dentistry and medical devices, 3-D printed parts are used in a variety of industries. Currently, 3-D printed parts are very fragile and only used in the prototyping phase of materials ...

Swimming robot probes Fukushima reactor to find melted fuel

July 19, 2017

An underwater robot entered a badly damaged reactor at Japan's crippled Fukushima nuclear plant Wednesday, capturing images of the harsh impact of its meltdown, including key structures that were torn and knocked out of place.

Microsoft cloud to help Baidu self-driving car effort

July 19, 2017

Microsoft's cloud computing platform will be used outside China for collaboration by members of a self-driving car alliance formed by Chinese internet search giant Baidu, the companies announced on Tuesday.

Making lab equipment on the cheap

July 18, 2017

Laboratory equipment is one of the largest cost factors in neuroscience. However, many experiments can be performed with good results using self-assembled setups involving 3-D printed components and self-programmed electronics. ...

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.