Hijacking mail.ru mail, tied to the cell? Think you are protected? [UPD4]
One year ago, my mail on mail.ru was stolen from me. (I didn’t understand how - no viruses, I don’t use left computers).
Then I broke all the spears about their tech support trying to regain access. Time 4 filled out their form. But every time I got a hangout. This is despite the fact that my real name / date of birth was entered before the hijacking and I provided them with a passport scan. In addition, 95% of mail was from a static ip, which I also indicated and could confirm possession of it. But no! "The information you provided is not enough to restore access to the mail."
Then everything was resolved by the fact that I had an acquaintance close to the mail that helped to resolve the situation.
')
After recovery, I immediately tied my mail to my cell. Now I'm safe, I thought!
And here - horse-radish !!! SMS has just come to the phone:
Is it like that ???
Why did I tie my cell phone to the mail, if I didn’t receive a confirmation to untie it ??? To just get a notification "your mail is hijacked" ??? This is some kind of obviously weird security policy!
Naturally, the secret question, password and other joys were changed and I do not have access to the email. I sent a familiar profile ... I wonder what the outcome will be. The thing is, I’m stupidly unable to answer half the questions in the questionnaire ... "When did you register?" (Yes, God knows! Many, many years ago). “When did you log in via the web?” (Without any idea at all ... almost never). “Your secret question”, “Your password” is no longer relevant. In general, the form is not for recovery after theft, but rather for really restoring the forgotten.
PS: Of course, nobody had access to the cell phone. I am at home all day. One.
PPS: I exclude Brutfors because the password was non-vocabulary, containing about 15 characters, incl. and tsiferki
UPD1 : About an hour ago, in the comments, the habrauser from the mail mailer was smart , after which I wrote to him in a personal. He promised in the near future to respond in the comments ... We are waiting, sir ...
UPD2 : Thank you smart 'u for clarifying the comment .
UPD3 : They explained to me that the soap was stolen through a secret question (apparently, the answer is not so difficult to get rid of). They also said that soon they would contact me from technical support and indicated that they might have been taken away and my second box on the soap (yes, they really took away!). Thanks in advance, waiting for a successful resolution of the situation.
UPD4 : Thanks again smart . All quickly decided and restored!
Then I broke all the spears about their tech support trying to regain access. Time 4 filled out their form. But every time I got a hangout. This is despite the fact that my real name / date of birth was entered before the hijacking and I provided them with a passport scan. In addition, 95% of mail was from a static ip, which I also indicated and could confirm possession of it. But no! "The information you provided is not enough to restore access to the mail."
Then everything was resolved by the fact that I had an acquaintance close to the mail that helped to resolve the situation.
')
After recovery, I immediately tied my mail to my cell. Now I'm safe, I thought!
And here - horse-radish !!! SMS has just come to the phone:
Is it like that ???
Why did I tie my cell phone to the mail, if I didn’t receive a confirmation to untie it ??? To just get a notification "your mail is hijacked" ??? This is some kind of obviously weird security policy!
Naturally, the secret question, password and other joys were changed and I do not have access to the email. I sent a familiar profile ... I wonder what the outcome will be. The thing is, I’m stupidly unable to answer half the questions in the questionnaire ... "When did you register?" (Yes, God knows! Many, many years ago). “When did you log in via the web?” (Without any idea at all ... almost never). “Your secret question”, “Your password” is no longer relevant. In general, the form is not for recovery after theft, but rather for really restoring the forgotten.
PS: Of course, nobody had access to the cell phone. I am at home all day. One.
PPS: I exclude Brutfors because the password was non-vocabulary, containing about 15 characters, incl. and tsiferki
UPD1 : About an hour ago, in the comments, the habrauser from the mail mailer was smart , after which I wrote to him in a personal. He promised in the near future to respond in the comments ... We are waiting, sir ...
UPD2 : Thank you smart 'u for clarifying the comment .
UPD3 : They explained to me that the soap was stolen through a secret question (apparently, the answer is not so difficult to get rid of). They also said that soon they would contact me from technical support and indicated that they might have been taken away and my second box on the soap (yes, they really took away!). Thanks in advance, waiting for a successful resolution of the situation.
UPD4 : Thanks again smart . All quickly decided and restored!
Source: https://habr.com/ru/post/129256/
All Articles