• On TV.com: TOP 10 Shows CANCELED Too Soon
May 30, 2008 11:38 AM PDT

Hotmail users getting locked out

by Robert Vamosi
  • Font size
  • Print
  • 14 comments

Imagine getting an e-mail from a friend or family member with the following subject line: "ITS IMPORTANT YOU GET BACK ME TODAY."

CNET is aware of a couple of Hotmail users who have recently gotten locked out of their accounts. In one case, someone who had hacked into an account sent a desperate-sounding e-mail asking for money under the account holder's name.

Microsoft had no direct comment.

The body of one of the e-mails, sent to a CNET reporter, reads:

"I am in a hurry writing this mail. I had a trip to oxfordshire, United Kingdom for an urgent event . Unfortunately for me all my money got stolen at the hotel where i lodged from the attack of some armed robbers and since then i have been without any money i am even owing the hotel here,So i have only access to emails,my mobile phone can't work here so i did not bring it along. Please can you lend me $1500 so i can return back and settle the hotel bills i would return it back to you as soon as i get home, I am so confused right now. You can have it sent through western union."

The owner of the Hotmail account was confirmed to be at home, safe.

"If a customer at any time suspects their account has been accessed by an unauthorized party, they should contact our customer support team, a Microsoft representative said.

That's exactly what a second locked-out Hotmail user did in early May. Microsoft support staff responded with the following message: "Thank you for your message to MSN and Windows Live Privacy. I understand you are having difficulties accessing your MSN Hotmail account because you believe someone has gained unauthorized access to your account. For assistance with this issue, please contact the MSN Support staff using the (following) form." The message is signed by Raktim from MSN and Windows Live Privacy.

After filling out the form, several weeks passed, and the Hotmail account holder said he has still received no further response from Microsoft.

"Microsoft is committed to helping consumers have a safe, secure, and positive online experience," a company representative said Thursday. In the case of the first e-mail, Microsoft worked with the owner to restore her access. In the case of the second, it's still pending. "As always, we reiterate our general guidance to customers to help protect themselves and their accounts by exercising extreme caution when opening unsolicited attachments and links from both known and unknown sources, and that they install and regularly update antivirus software," the representative said.

Without addressing what might have occurred regarding the second person's account, Microsoft appears to be blaming the user: if you had used more caution, you probably wouldn't be in this situation.

The Microsoft representative mentioned the company's online security and safety best practices for customers, including specific guidance on how to help protect your Windows Live ID account security. But when it comes to protecting your free Hotmail e-mail account, users appear to be without much recourse.

As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments.
advertisement
Click here!
Recent posts from Defense in Depth
Window Snyder to leave Mozilla
How to handle ID fraud's youngest victims
Is white listing going mainstream?
How Live OneCare changed the antivirus landscape
Express Scripts clients threatened with extortion
Study: DDoS attacks threaten ISP infrastructure
Security expert talks Russian gangs, botnets
Extortion used in Express Scripts database breach
Add a Comment (Log in or register) (14 Comments)
  • prev
  • 1
  • next
by chiefjimbo May 30, 2008 1:32 PM PDT
This happened to my girlfriend's friend, but the friend's email provider was Gmail. It said he was stuck in Nigeria and got mugged and now owes a ton to the hotel. We responded to the email knowing it was not the friend and said "are you serious? I can help you out" We actually got a response from the thief to the effect of "Yes, I cannot be any more serious." The thief's English was pretty bad in both the solicitation email and the response email. The weird thing was he never specified a place to send the money.

Needless to say, 4 hours after the email went out, her friend regained control of his account thanks to the people at google.
Reply to this comment
by RichRotorhead June 8, 2009 7:16 PM PDT
Most of these hacking are easily avoidable if one is careful and uses common sense.

As a former MSN Customer Support Staff Employee, the most common hacks I've witness, occur when a free hotmail account holder receives an official-looking email from what appears to be from Microsoft or MS Windows Live, warning the reader that unless they reply (or click on link) and supply certain private info (passwords, etc) to verify account ownership, their account will be SHUT DOWN!!!

Unfortunately the reason MS Customer Support isn't much help, is because if your hotmail account was never part of a paid MSN account, it simply wont pull up on the MS support agent?s computer system when they type it in, virtually rendering your account... INVISIBLE!!!

As an MSN agent when I used to answer many such calls, I really felt bad for the person on the other line, but with the limited knowledge gained thru training we had there was just no way around it, until one day when... I FOUND A LOOPHOLE IN THE SYSTEM!!!

This loophole will not only allow you to regain access to your account, but you will receive the same level of respect, service and protection usually reserved for other MSN accounts that often cost as much as $300 yr. or more and I can show you how to do it for less $50.

If you?d like more info on regaining access to your account contact me at ratedx_7@yahoo.com for detailed instructions.
by chiefjimbo May 30, 2008 1:33 PM PDT
This happened to my girlfriend's friend, but the friend's email provider was Gmail. It said he was stuck in Nigeria and got mugged and now owes a ton to the hotel. We responded to the email knowing it was not the friend and said "are you serious? I can help you out" We actually got a response from the thief to the effect of "Yes, I cannot be any more serious." The thief's English was pretty bad in both the solicitation email and the response email. The weird thing was he never specified a place to send the money.

Needless to say, 4 hours after the email went out, her friend regained control of his account thanks to the people at google.
Reply to this comment
by chiefjimbo May 30, 2008 1:35 PM PDT
This happened to my girlfriend's friend, but the friend's email provider was Gmail. It said he was stuck in Nigeria and got mugged and now owes a ton to the hotel. We responded to the email knowing it was not the friend and said "are you serious? I can help you out" We actually got a response from the thief to the effect of "Yes, I cannot be any more serious." The thief's English was pretty bad in both the solicitation email and the response email. The weird thing was he never specified a place to send the money.

Needless to say, 4 hours after the email went out, her friend regained control of his account thanks to the people at google.
Reply to this comment
by Dalkorian May 30, 2008 4:21 PM PDT
After filling out the form, several weeks passed, and the Hotmail account holder said he has still received no further response from Microsoft.

"Microsoft is committed to helping consumers have a safe, secure, and positive online experience," a company representative said Thursday.


Typical M$ BS. Translation: "we're committed to telling you we want to help, but it's your own fault and you're on your own." You simply can't sleep with the devil and then complain that he was rough with you.
Reply to this comment
by pissedathotmailsupport January 15, 2009 10:55 PM PST
Microsoft is full of SH...... My account was hijacked 2 days ago and now all my verification information has been changed. I own three VISTA machines and the 2007 Office suite so MS can kiss my you know what for choosing to use their "free" unsupportable email tool. All my contacts have gotten the following letter. MS won't fix this and I will have lost 5 years worth of material. Goodbye MS, hello Firefox, Thunderbird, and any other NON MS product.

Hello ,
sorry I didn't inform you about my traveling to Africa.on a particular
program.ABMP. The campaign emphasizes personal initiative in combating HIV/AIDS
.the website is http://www.itbeginswithyou.org/. Honestly, I don?t believe
that i could encounter this (particular) trial, the (uninvited) circumstance,
the(embarrassing) difficulty, Without a doubt these are some of the most
difficult times that many people have encountered simultaneously in a while. I
misplaced my wallet on my way to the hotel where my money,and other valuable
things were kept. instead of looking out and grumbling.I don?t mean to offend
in any way, but I just had to say what I feel.

I got motivated to reach you,assist me with some money,
to the tune of (£2000) pound to sort-out my hotel bills and get myself back home.readily and
honestly appreciating whatever you can afford,I'll pay back upon my return.
The money could be wired through western union money transfer with the
information bellow.

NIGERIA!!!!! sent to all my contacts from my email account that MS will do nothing about....
by Imalittleteapot May 30, 2008 11:32 PM PDT
Even though I don't have a Hotmail account anymore. The two times I needed help from their support I was helped within 24 hours. No muss no fuss. Through email and they got right back to me. Did I just get lucky?
Reply to this comment
by firefoxluva95 May 31, 2008 7:51 AM PDT
Gmail's better in my opinion. They offer IMAP and POP access or you can use both at the same time. Then Gmail can grab all the email from the other email accounts you have so you can consolidate everything into one box. They adjust your mailbox size according to the amount of space you need, it's not a set amount that's inflexible.
Reply to this comment
by Lebieque June 4, 2008 1:34 AM PDT
the bulk of SPAM received by myself, Nigerian and otherwise, comes from Hotmail accounts. What must I do, not filter it out up front? Give me a break!
Reply to this comment
by twitchy126 August 27, 2008 8:29 PM PDT
very frustrating... this just happened to me. someone hacked my hotmail and sent an email to my contact list posing as me, asking for money to be sent to me in the UK. and i'm locked out of hotmail, so i can't intercept the responses or warn my contacts. getting ahold of someone at msn / microsoft is not proving to be easy. what happens when hackers break into peoples Microsoft Healthvault accounts (which use the same username & password as your hotmail account) - and hold personal medical records hostage???!! very scary. desperately hoping this gets resolved.
Reply to this comment
by Artlynk October 18, 2008 2:27 AM PDT
I got locked out early August 08, and can't seem to get unlocked no matter who I ask, can't reset passwords as everything comes up in Chinese??? writing, so can't reset it... nobody seems to be able to help, anywhere
Reply to this comment
by pissedathotmailsupport January 15, 2009 11:02 PM PST
I was told by the phone support people that I would be trated the same over email because I had a free account. Well, to use the email feature you have to verify information, and when that information has all been changed how am i TO VERIFY IT? i HAD PROBLEMS WITH ONE CARE AS WELL.. Change providers now, it sounds like Gooogle and Gmail KNOW how to support theeir clients.

Soembody pleasepost their most recent positive solution to this.... My entire contact list has received the following email from my account from some guy in Nigeria????

Hello ,
sorry I didn't inform you about my traveling to Africa.on a particular
program.ABMP. The campaign emphasizes personal initiative in combating HIV/AIDS
.the website is http://www.itbeginswithyou.org/. Honestly, I don?t believe
that i could encounter this (particular) trial, the (uninvited) circumstance,
the(embarrassing) difficulty, Without a doubt these are some of the most
difficult times that many people have encountered simultaneously in a while. I
misplaced my wallet on my way to the hotel where my money,and other valuable
things were kept. instead of looking out and grumbling.I don?t mean to offend
in any way, but I just had to say what I feel.

I got motivated to reach you,assist me with some money,
to the tune of (£2000) pound to sort-out my hotel bills and get myself back home.readily and
honestly appreciating whatever you can afford,I'll pay back upon my return.
The money could be wired through western union money transfer with the
information bellow.

Then he precedes to use my name etc..... I cannot beleive that a company as world class as MS, wouldn't have a solution for this???? And I'm dumb enough to own two vista laptops and a vista desktop, with the Office 2007 Suite?????
Reply to this comment
by Serenity_ree May 13, 2009 10:16 AM PDT
Over the past 5 years I have held and actively used email accounts with Hotmail/Windows Live Mail, Yahoo, and Outlook. I am careful to create strong passwords, use a perscription security suite, and am very careful in opening attachments and clicking links within my mail. Not once have I had any issues of anyone hacking into my accounts.

I agree with Microsoft to a degree. If people do not use precautionary steps and actions with their email accounts they do hold responsibility for unauthorized access and use. It states right in the TOS that users must be careful and that Microsoft (or Yahoo!) cannot be liable for unauthorized access. Why should Microsoft spend a bunch of money fixing errors that were the responsibility of the user, not Microsoft? I am tired of hearing people moan and groan and blame anyone other than themselves when things go wrong in their lives. I am tired of people not accepting personal responsibility for their own actions. Microsoft, Yahoo!, Google, and other email providers provide a free service to the public (unless a user opts in for a higher paid version) and yet people are not grateful and blame the company for their own mistakes.

I do not see the outrage of Microsoft basically telling a user that it was their fault and they needed to deal with it. Microsoft provides a great deal of free services to the public. It is my experience that Microsoft is helpful and timely in responses to issues not of my own making. Even issues where it was questionable who was at fault Microsoft has always come through. I can only imagine that some people do not tell the entire story in order to get people to feel sorry for them and buy into their opinon of their own victimhood.
Reply to this comment
by RichRotorhead June 8, 2009 5:54 PM PDT
I'll have to agree with Serenity_ree.

Most of these hacking are easily avoidable if you're just careful and use common sense.

As a former MSN Customer Support Staff Employee, the most common hacks I've witness, occur when a free hotmail account holder receives an official-looking email from what appears to be from Microsoft or MS Windows Live, warning the reader that unless they reply (or click on link) and supply certain private info (passwords, etc) to verify account ownership, their account will be SHUT DOWN!!!

Unfortunately the reason MS Customer Support isn't much help, is because if your hotmail account was never part of a paid MSN account, it simply wont pull up on the MS support agent?s computer system when they type it in, virtually rendering your account... INVISIBLE!!!

As an When I used to answere many such calls, I really felt bad for the person on the other line, but with the limited knowledge gained thru training we had there was just no way around it, until one day when... I FOUND A LOOPHOLE IN THE SYSTEM!!!

This loophole will not only allow you to regain access to your account, but you will receive the same level of respect, service and protection usually reserved for other MSN accounts that often cost as much as $300 or more and I can show you how to do it for less $50.


If you?d like more info on regaining access to your account contact me at ratedx_7@yahoo.com for detailed instructions.
(14 Comments)
  • prev
  • 1
  • next
advertisement

The 411 on early-termination fees

Verizon Wireless has doubled its early-termination fees for smartphones, but what does it mean for the rest of the industry?

Google has its own plan for Netbooks

No, the search giant isn't saying it will build a Netbook. But it sure knows what it would like one running Chrome OS to resemble, and that's a little different from the Netbook of today.
• Screenshot tour of Chrome OS

About Defense in Depth

Covering computer viruses and computer crime, Robert Vamosi goes beyond the hype to provide you with expert interviews of the top security researchers, as well as offering the hands-on, nontechnical advice you'll need to stay safe online.

Add this feed to your online news reader

Defense in Depth topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right