Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I found a post regarding Yahoo Mail "Strongly Believed to Be Compromised", and it was exactly my case. I logged into my Yahoo mail account from China and I received a security alert stating my account has been compromised.

Could you explain more why it happened?

share|improve this question

Since that's kind of hard to do without threatening legal action against Yahoo or a similar tactic, I'll just go over some of the more common ways that accounts are hijacked:

  • The hacker installed malware on your computer, and it captured your password or a session cookie and went along and tried to change your password or something.

  • The hacker created a phishing site and skimmed the password from you without you realizing that it was a fraudulent page.

  • The hacker hacked into Yahoo's servers and grabbed their hashes and started cracking them.

  • The hacker may have pulled the password from a recent disclosure of passwords.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.