Chat Room Scam

A user drops in and suggests a "humourous game" whereby people post their "porn star name". There are a few variations on the theme but the general format is typically "something" + mother's maiden name. The "something" varies, but is usually one of: town of birth, first pet's name, first childhood friend, name of first school, mother's father's birthplace etc. In short, the information solicited is invariably an answer to one of the common "secret questions" on webmail accounts (e.g. hotmail, yahoo etc.) Given that a lot of users maintain webmail accounts with the same login name as their site username, it is very quick and easy for a scammer to access an e-mail account by a simple process of trial and error and thereby access a great deal of personal information (e.g. a home address that may have been given to a trusted party for a regular meet) without the user actually disclosing any personal info in chat.

The most valuable single piece of information is the mother's maiden name which, of course, is also a classic "security question" asked by most financial services providers (banks, credit card Co.s etc.). In combination with a name and address from an e-mail AC...Also of serious concern is the potential ability of a scammer to log into one's Instant Messenger.

Forwarned is foreamed

Re: Chat Room Scam

In short, the information solicited is invariably an answer to one of the common "secret questions" on webmail accounts (e.g. hotmail, yahoo etc.) Given that a lot of users maintain webmail accounts with the same login name as their site username, it is very quick and easy for a scammer to access an e-mail account by a simple process of trial and error and thereby access a great deal of personal information

The most valuable single piece of information is the mother's maiden name which, of course, is also a classic "security question" asked by most financial services providers (banks, credit card Co.s etc.). In combination with a name and address from an e-mail AC...Also of serious concern is the potential ability of a scammer to log into one's Instant Messenger.

Forwarned is foreamed

Are you really this paranoid? I read your stuff about PC security. Chill out man!
Unless you're an MP or work for MI5 why would anyone want to hack your hotmail account? 90% are full of crap and junk anyway so hacking one looking for bank details is like a needle in a haystack.