Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

AOL Probes Breach Allowing Hackers to Spoof Email

WASHINGTON – AOL said Monday it had launched an investigation with federal authorities into a security breach that allowed hackers to gain access to around two percent of its email accounts.

The probe began “following a significant increase in the amount of spam appearing as ‘spoofed emails’ from AOL Mail addresses,” the Internet company said in a statement.

WASHINGTON – AOL said Monday it had launched an investigation with federal authorities into a security breach that allowed hackers to gain access to around two percent of its email accounts.

The probe began “following a significant increase in the amount of spam appearing as ‘spoofed emails’ from AOL Mail addresses,” the Internet company said in a statement.

Spoofing is a tactic used by hackers to make it appear that the message is from an email user known to the recipient in order to trick the recipient into opening an attachment which may contain malware, AOL noted.

“AOL’s investigation is still underway, however, we have determined that there was unauthorized access to information regarding a significant number of user accounts,” the statement said.

“This information included AOL users’ email addresses, postal addresses, address book contact information, encrypted passwords and encrypted answers to security questions that we ask when a user resets his or her password, as well as certain employee information.”

The company added that “we believe that spammers have used this contact information to send spoofed emails that appeared to come from roughly two percent of our email accounts.”

AOL said it was working with “best-in-class external forensic experts and federal authorities to investigate this serious criminal activity.”

The statement said it was not known whether the encryption on passwords or answers to security questions was broken, but that “as a precautionary measure, we nevertheless strongly encourage our users and employees to reset their passwords used for any AOL service.”

Written By

AFP 2023

Click to comment

Expert Insights

Related Content

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Cybercrime

A new study by McAfee and the Center for Strategic and International Studies (CSIS) named a staggering figure as the true annual cost of...

Ransomware

US government reminds the public that a reward of up to $10 million is offered for information on cybercriminals, including members of the Hive...

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Email Security

Microsoft is urging customers to install the latest Exchange Server updates and harden their environments to prevent malicious attacks.

Cybercrime

Video games developer Riot Games says source code was stolen from its development environment in a ransomware attack