Football Fans: Download the 2012 Schedule App from Google Play!


Go Back   Android Forums > Android Discussion > Android Applications

Android Applications All the information you could ever want about Android Applications. Learn about apps and get help with them... all here! New apps can be found and announced in the Applications Announcements forum linked below.



Reply
 
LinkBack Thread Tools
Old April 21st, 2011, 12:07 AM   #1 (permalink)
Member
 
Nor*Cal's Avatar
 
Join Date: Mar 2011
Location: Bay Area
Posts: 164
 
Device(s): Thunderbolt
Thanks: 25
Thanked 58 Times in 34 Posts
Default Anyone have security issues with Yahoo! Mail app?

I'm using the Yahoo Mail app on my Thunderbolt (in addition to my gmail app). Today, for the first time in over 10 years of having my Yahoo email, my account was hacked and spam was sent to my contacts using my email address. Luckily no virus was attached, it was just some online pharmaceutical website.

I checked the login history and it showed 2 logins using Yahoo Mobile in Mexico.

I've changed my password but am now worried about my Yahoo app and how safe it is. I'm new to android and new to using this app.

Anyone else have any problems with their yahoo mail or heard of any security issues?

I did a bit of google searching but did not come up with much except for this web site that basically claims that just about all of the android email apps are risky.

Your feedback is appreciated.

Nor*Cal is offline  
Reply With Quote
The Following User Says Thank You to Nor*Cal For This Useful Post:
ManofKent (June 20th, 2011)
Sponsors
Old April 21st, 2011, 08:29 AM   #2 (permalink)
Senior Member
 
Join Date: Dec 2009
Posts: 3,355
 
Device(s): Motorola Droid
Thanks: 0
Thanked 284 Times in 241 Posts
Default

Just remember coincidental != causal. Yahoo accounts get hacked even without the user using the mobile app.
takeshi is offline  
Reply With Quote
The Following User Says Thank You to takeshi For This Useful Post:
Nor*Cal (April 21st, 2011)
Old June 20th, 2011, 01:45 PM   #3 (permalink)
New Member
 
Join Date: Jun 2011
Posts: 2
 
Device(s):
Thanks: 4
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by Nor*Cal View Post
I'm using the Yahoo Mail app on my Thunderbolt (in addition to my gmail app). Today, for the first time in over 10 years of having my Yahoo email, my account was hacked and spam was sent to my contacts using my email address. Luckily no virus was attached, it was just some online pharmaceutical website.

I checked the login history and it showed 2 logins using Yahoo Mobile in Mexico.

I've changed my password but am now worried about my Yahoo app and how safe it is. I'm new to android and new to using this app.

Anyone else have any problems with their yahoo mail or heard of any security issues?

I did a bit of google searching but did not come up with much except for this web site that basically claims that just about all of the android email apps are risky.

Your feedback is appreciated.
I downloaded the Yahoo mail app at the weekend and had my account hacked from Brazil this morning. It may be coincidence, but like you I've been using Yahoo for over 10 yrs and I'm pretty security aware.

I'd be interested to hear whether other people have had similar problems.
ManofKent is offline  
Reply With Quote
Old June 20th, 2011, 04:51 PM   #4 (permalink)
Member
 
Join Date: May 2011
Location: ~/jan/
Posts: 146
 
Device(s): Optimus One, Optimus Black
Thanks: 3
Thanked 9 Times in 8 Posts
Default

do it again and see if it happens again...
janpetras is offline  
Reply With Quote
Old June 20th, 2011, 11:17 PM   #5 (permalink)
New Member
 
Join Date: Jun 2011
Posts: 2
 
Device(s):
Thanks: 4
Thanked 0 Times in 0 Posts
Default

Maybe it was just coincidence. I've checked my tab for DroidDream and it's free of any problems.
ManofKent is offline  
Reply With Quote
Old June 23rd, 2011, 08:39 PM   #6 (permalink)
New Member
 
Join Date: Jun 2011
Posts: 1
 
Device(s):
Thanks: 0
Thanked 1 Time in 1 Post
Default same issue

Same issue.... today two logins from Mexico appeared and everyone in my contacts received a spam e-mail. Never a problem in the past and both my phone and computer come back clean when checked by two different AV programs.
ithacles is offline  
Reply With Quote
The Following User Says Thank You to ithacles For This Useful Post:
ManofKent (July 8th, 2011)
Old June 27th, 2011, 06:06 PM   #7 (permalink)
New Member
 
Join Date: Jun 2011
Posts: 1
 
Device(s):
Thanks: 0
Thanked 1 Time in 1 Post
Default

Yes. My yahoo email account was hacked for the first time in the 10+ years I've had it and I consider myself pretty tech-savvy, this was the first ever hack, and after a friend tipped me off, I found that the users accessed yahoo mobile from the netherlands, changing my password within minutes just after I had checked my email for the first time from yahoo mobile. I uninstalled it, reported it, etc... that occurred on June 16th 2011.
itsdevo is offline  
Last edited by itsdevo; June 27th, 2011 at 06:08 PM. Reason: added date of incident.
Reply With Quote
The Following User Says Thank You to itsdevo For This Useful Post:
ManofKent (July 8th, 2011)
Old June 27th, 2011, 07:05 PM   #8 (permalink)
Senior Member
 
Join Date: Jun 2011
Location: Savannah, GA
Posts: 818
 
Device(s): Samsung Galaxy Prevail
Thanks: 499
Thanked 103 Times in 85 Posts
Default

How do you check the login history.

I have had a yahoo account for 10 years and briefly used that app when I first got my android phone. Finally deleted it and briefly added the account to the stock email app.

I would like to see if I also got hacked. Luckily, it was not my main email and I did not have a big contact list.
wyelkins is offline  
Reply With Quote
The Following User Says Thank You to wyelkins For This Useful Post:
ManofKent (July 8th, 2011)
Old January 25th, 2012, 11:24 AM   #9 (permalink)
New Member
 
Join Date: Dec 2011
Posts: 6
 
Device(s): Samsung Galaxy S2 Skyrocket
Thanks: 1
Thanked 2 Times in 2 Posts
Default

Sorry for bringing back and old thread but the same exact thing happened to my girlfriend a day after I added it to her Android tablet. I am investigating rogue apps but I don't know.

!# UPDATE

No correlation it has not happened since and she added the app back. It's funny because you always think "there's no way it's a coincidence," but it ultimately is just that.
promiseofcake is offline  
Last edited by promiseofcake; February 9th, 2012 at 02:44 PM.
Reply With Quote
Old January 25th, 2012, 04:51 PM   #10 (permalink)
Member
 
Join Date: Nov 2010
Posts: 361
 
Device(s):
Thanks: 2
Thanked 31 Times in 27 Posts
Default

How does one check the login history for yahoo? How were they able to find out that hackers are logging in from Mexico, Brazil, Netherlands etc??
funpig is offline  
Reply With Quote
Sponsors
Old February 9th, 2012, 02:45 PM   #11 (permalink)
New Member
 
Join Date: Dec 2011
Posts: 6
 
Device(s): Samsung Galaxy S2 Skyrocket
Thanks: 1
Thanked 2 Times in 2 Posts
Default

Quote:
Originally Posted by funpig View Post
How does one check the login history for yahoo? How were they able to find out that hackers are logging in from Mexico, Brazil, Netherlands etc??
Yahoo! Enables Monitoring of Login Activity for Better Account Protection | Yahoo! Developer Network
promiseofcake is offline  
Reply With Quote
Old April 22nd, 2012, 10:54 AM   #12 (permalink)
New Member
 
Join Date: Apr 2012
Posts: 2
 
Device(s):
Thanks: 0
Thanked 0 Times in 0 Posts
Default Yes, just at the time I used it.

At almost the exact time I used Yahoo for Android, my account was hacked.

I can only assume it was one of 3 things.

1) I had wifi on, and was not home. Perhaps it used an untrusted wifi where I was checking my email and the user/pw was sniffed in clear (if so bad on yahoo app for not encrypting!)

2) I had a spoof app. I downloaded a long time ago and use very infrequently.

3) Had malware. (I just installed Avast for android, did not report anything.

There is one thing I really don't understand. The hacker sent spam from my account to my contacts. I know it is from my email because it is in my sent folder. However, when I go to the log, I see only my computer at home logging in when the spam was sent.

How can this be? I logged in via android, no yahoo log entry for that. The hacker clearly logged on, but no log of that either,

Does yahoo mail only log web users? Not android app login??

Changed password and added a double check on login on new computer,

Larry
LarryNH914 is offline  
Reply With Quote
Old April 23rd, 2012, 11:08 AM   #13 (permalink)
New Member
 
Join Date: Apr 2012
Posts: 2
 
Device(s):
Thanks: 0
Thanked 0 Times in 0 Posts
Default

I think my password was not compromised. Since I was on an untrusted network (had wifi on while out) I think my email session was hijacked. Yahoo email does not use https, it uses cookies...

Why do I think this?
1) The spam was sent from my account (in sent folder)
2) No unusual login activity in my sign-in log on yahoo.

So, to do this the hacker must have gotten my cookies... Sooooo, don't have wifi on when you go out using Yahoo (gmail uses https, it is safe I think).
LarryNH914 is offline  
Reply With Quote
Reply

Bookmarks


Go Back   Android Forums > Android Discussion > Android Applications User CP
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -5. The time now is 11:49 PM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
Custom vBulletin Skins by: Relivo