Hotmail Users Get Phished

Microsoft says a phishing scheme is behind the exposure of passwords to thousands of Hotmail accounts late last week and adds that it’s helping affected customers regain control of their accounts.

On Monday, the Neowin technology blog posted a story saying that an anonymous user on Oct. 1 had uploaded a list with password details of more than 10,000 Hotmail accounts to a Web site called pastebin.com, where developers typically share programming code with each other. Neowin said it had seen part of the list, which has since been removed, and notified Microsoft of the issue.

After an internal investigation into the leaked Hotmail credentials, Microsoft (MSFT) said in a statement that it determined the passwords were obtained through a phishing scam. In a phishing scam, hackers send out legitimate-looking emails under the letterhead of banks, eBay (EBAY) and other institutions, usually telling consumers they need to reset online passwords to their Web sites for security purposes.

Read the rest of this post on the original site