web analytics

Xtra email compromised?

Written By: - Date published: 12:16 pm, February 10th, 2013 - 17 comments
Categories: internet - Tags: ,

In the last 12 hours I’ve had robo-spam email from 4 different friends, all with xtra email accounts.

Is anyone else seeing this? Could be a major compromise of xtra email.

If you have an xtra account, check your “out” folder. If there are messages there (typically to about 8 recipients) that you didn’t send, then you are probably affected.

17 comments on “Xtra email compromised? ”

  1. JK 1

    Yep – I received one – no subject – from Moira Coatesworth which turned out to be spam

  2. James Thrace 2

    Yep, I’ve had 2 from the same person. Both spam. Both emails included all recipients in the “to” field that this person has emailed… ever.

  3. Roflcopter 3

    It’s been happening with increasing frequency over the last week or so.

  4. Ed 4

    I’ve had two in the last 12 hours – is it worth advising people to contact Xtra?

  5. Zola 5

    I got the following sent to me.-

    Dear Xtra Subscriber, We are currently verifying our subscribers
    Profile in order to increase the Efficiency of our mail
    features.
    Due to the congestion in all Profile users and removal of all unused
    Account, Xtra Will be shutting down all unused Profile,
    To Join in the Recent Upgrade Taking Place at Xtra ,You must
    Reply to this email by Confirming your account details below,
    UserName:
    Password:
    Failure to do this will immediately render
    your email address deactivated from our database.
    Thanks for using Xtra MAIL
    We are sorry for any inconvenience.
    Regards,
    Xtra Customer Care Team.

    • DH 5.1

      Standard phishing email there Zola, that’s not from Xtra. Anyone who followed those instructions needs to change their password.

      [lprent: Good advice. Apart from using the word “Standard”. Just to be clear, we don’t send e-mails asking anyone to do anything apart from when they initially register. And that has been off since the server move in Jan because I forgot to turn the darn thing back on. I needed to get rid of the IP of the originating server, and never got time to do it. Back on in the next few days. ]

      • Janice 5.1.1

        I was going to warn the same DH. I am with xtra and have not received anything like that yet.

  6. Fortran 6

    Yes I got a real Xtra em stuff up yesterday afternoon, bouncing em’s to people in my address book to whom I have sent nothing.
    Had huge auto MS security update (23 updates) this morning.
    Probably related.
    Updated all my security programmes this morning.

  7. Nigel 7

    Yes, I have had about 8 of these emails and other family members have them too. – all xtra/yahoo accounts. started at just before 7am today. The link in each email points to a different URL each time, which is unusual.

  8. PM-Geek 8

    It was actually a Yahoo vulnerability that has been doing the rounds for a few weeks, but seems to have jumped over to Xtra (who outsource their email to Yahoo).

    For geeks: It was an XSS vulnerability in a 9 month old unpatched instance of WordPress on Yahoo’s site. Details here:
    http://threatpost.com/en_us/blogs/yahoo-mail-breach-linked-old-wordpress-vulnerability-013113

    For non-geeks: This was a vulnerability at Yahoo’s end and particularly slack. Just another reason you really shouldn’t use Yahoo or Xtra email accounts.

    Probably the same issue that was discovered and being sold last year (eg see here):
    http://threatpost.com/en_us/blogs/yahoo-mail-cross-site-scripting-attack-sale-112612

    Apparently it’s fixed now, although it’s quite likely that whoever did it kept copies of all your contacts and will keep spamming them in your name.

    • r0b 8.1

      Thanks for that…

    • David H 8.2

      Damn you mean people still use Yahoo??? But it’s not only that, it’s the whole Miccysoft (Windows (they own a chunk of Yahoo)) bundled software ie: Outlook express, or what ever they call it now.
      I use Thunderbird for a mail client, and I have a Gmail account, and I have NO problems. There again I keep well away from anything to do with Telecom. Yes I do use Windows 7 but anti virus, and previously mentioned mail programs, are NON Miccysoft.

  9. irascible 9

    Have had spam url link from at least 5 people this weekend from within NZ. Earlier had same link spammed from email accounts in ME / Asia all thRough Yahoo.

  10. karol 10

    I had one today. Alerted the person who said they’d just noticed that loads of emails had been sent from hir account.

  11. John Dalley 11

    Iv’e had several with xtra address as well as a couple with yahoo email accounts

  12. Nigel 12

    Hi all, I’m still getting the emails. All from accounts @xtra.co.nz via yahoo.com – another six so far today. I must be in a lot of address books.

  13. Nigel 13

    I meant to mention that the spamming was briefly reported on the 6 O’Clock One News yesterday (Sunday).

Recent Comments

Recent Posts

  • Celebrating the Entry Into Force of the Treaty on the Prohibition of Nuclear Weapons
    [Opening comments, welcome and thank you to Auckland University etc] It is a great pleasure to be here this afternoon to celebrate such an historic occasion - the entry into force of the Treaty on the Prohibition of Nuclear Weapons. This is a moment many feared would never come, but ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Supporting disabled people to stay connected
    The Government is providing $3 million in one-off seed funding to help disabled people around New Zealand stay connected and access support in their communities, Minister for Disability Issues, Carmel Sepuloni announced today. The funding will allow disability service providers to develop digital and community-based solutions over the next two ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Voluntary saliva testing offered to quarantine workers from Monday
    Border workers in quarantine facilities will be offered voluntary daily COVID-19 saliva tests in addition to their regular weekly testing, COVID-19 Response Minister Chris Hipkins said today. This additional option will be rolled out at the Jet Park Quarantine facility in Auckland starting on Monday 25 January, and then to ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Next steps in firearms buy-back
    The next steps in the Government’s ambitious firearms reform programme to include a three-month buy-back have been announced by Police Minister Poto Williams today.  “The last buy-back and amnesty was unprecedented for New Zealand and was successful in collecting 60,297 firearms, modifying a further 5,630 firearms, and collecting 299,837 prohibited ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Jobs for Nature projects target iconic ecosystems
    Upscaling work already underway to restore two iconic ecosystems will deliver jobs and a lasting legacy, Conservation Minister Kiri Allan says.  “The Jobs for Nature programme provides $1.25 billion over four years to offer employment opportunities for people whose livelihoods have been impacted by the COVID-19 recession. “Two new projects ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • New Public Housing Plan announced
    The Government has released its Public Housing Plan 2021-2024 which outlines the intention of where 8,000 additional public and transitional housing places announced in Budget 2020, will go. “The Government is committed to continuing its public house build programme at pace and scale. The extra 8,000 homes – 6000 public ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Prime Minister congratulates President Joe Biden on his inauguration
    Prime Minister Jacinda Ardern has congratulated President Joe Biden on his inauguration as the 46th President of the United States of America. “I look forward to building a close relationship with President Biden and working with him on issues that matter to both our countries,” Jacinda Ardern said. “New Zealand ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Jobs for Nature funding will create training and employment opportunities
    A major investment to tackle wilding pines in Mt Richmond will create jobs and help protect the area’s unique ecosystems, Biosecurity Minister Damien O’Connor says. The Mt Richmond Forest Park has unique ecosystems developed on mineral-rich geology, including taonga plant species found nowhere else in the country. “These special plant ...
    BeehiveBy beehive.govt.nz
    6 days ago
  • Pre-departure testing extended to all passengers to New Zealand
    To further protect New Zealand from COVID-19, the Government is extending pre-departure testing to all passengers to New Zealand except from Australia, Antarctica and most Pacific Islands, COVID-19 Response Minister Chris Hipkins said today. “The change will come into force for all flights arriving in New Zealand after 11:59pm (NZT) on Monday ...
    BeehiveBy beehive.govt.nz
    6 days ago
  • Bay Cadets learn skills to protect environment
    Bay Conservation Cadets launched with first intake Supported with $3.5 million grant Part of $1.245b Jobs for Nature programme to accelerate recover from Covid Cadets will learn skills to protect and enhance environment Environment Minister David Parker today welcomed the first intake of cadets at the launch of the Bay ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Cook Islanders to resume travel to New Zealand
    The Prime Minister of New Zealand Jacinda Ardern and the Prime Minister of the Cook Islands Mark Brown have announced passengers from the Cook Islands can resume quarantine-free travel into New Zealand from 21 January, enabling access to essential services such as health. “Following confirmation of the Cook Islands’ COVID ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Supporting communities and landowners to grow employment opportunities
    Jobs for Nature funding is being made available to conservation groups and landowners to employ staff and contractors in a move aimed at boosting local biodiversity-focused projects, Conservation Minister Kiritapu Allan has announced. It is estimated some 400-plus jobs will be created with employment opportunities in ecology, restoration, trapping, ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Border exception for some returning international tertiary students
    The Government has approved an exception class for 1000 international tertiary students, degree level and above, who began their study in New Zealand but were caught offshore when border restrictions began. The exception will allow students to return to New Zealand in stages from April 2021. “Our top priority continues ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Tiwai deal gives time for managed transition
    Today’s deal between Meridian and Rio Tinto for the Tiwai smelter to remain open another four years provides time for a managed transition for Southland. “The deal provides welcome certainty to the Southland community by protecting jobs and incomes as the region plans for the future. The Government is committed ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New member for APEC Business Advisory Council
    Prime Minister Jacinda Ardern has appointed Anna Curzon to the APEC Business Advisory Council (ABAC). The leader of each APEC economy appoints three private sector representatives to ABAC. ABAC provides advice to leaders annually on business priorities. “ABAC helps ensure that APEC’s work programme is informed by business community perspectives ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Govt’s careful economic management recognised
    The Government’s prudent fiscal management and strong policy programme in the face of the COVID-19 global pandemic have been acknowledged by the credit rating agency Fitch. Fitch has today affirmed New Zealand’s local currency rating at AA+ with a stable outlook and foreign currency rating at AA with a positive ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Additional actions to keep COVID-19 out of NZ
    The Government is putting in place a suite of additional actions to protect New Zealand from COVID-19, including new emerging variants, COVID-19 Response Minister Chris Hipkins said today. “Given the high rates of infection in many countries and evidence of the global spread of more transmissible variants, it’s clear that ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • 19 projects will clean up and protect waterways
    $36 million of Government funding alongside councils and others for 19 projects Investment will clean up and protect waterways and create local jobs Boots on the ground expected in Q2 of 2021 Funding part of the Jobs for Nature policy package A package of 19 projects will help clean up ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New Zealand Government acknowledges 175th anniversary of Battle of Ruapekapeka
    The commemoration of the 175th anniversary of the Battle of Ruapekapeka represents an opportunity for all New Zealanders to reflect on the role these conflicts have had in creating our modern nation, says Associate Minister for Arts, Culture and Heritage Kiri Allan. “The Battle at Te Ruapekapeka Pā, which took ...
    BeehiveBy beehive.govt.nz
    2 weeks ago