Its not just Pixie IDs that the links are being sent from :)

If ya click the first link up above it'll explain it a bit for ya

i read on one of the links in this thread that with the password they can access e-mail and via e-mail possibly account #s from financial companies, banks, etc.
*shrug* but wtf do i know? i haven't had a problem with it.
there is bright side to not being on any buddylists. :p:p:D

Actually Tess this has nothing to do with Pixies. They do not have our Pixies IDs or info.

The program is has accessed someone's buddy list on Yahoo IM. It is like a worm in that it is sending messages to all the peeps on that person's buddy list from Yahoo. Of course since that person is a Pixie, there are Pixies on that list. That is why a warning was posted here. Pixies is not affected and has nothing to do with this password phishing worm that is being spread through Yahoo Instant Messenger.

You do not need to change your Pixies password. You need to change your Yahoo one.

It really is virulent. I am being sent the URL link message from many different people.

Thanks Lil that is clearer now. I guess I will go change my password. Man I hate having to remember new things! :mad:

I need some one to confirm my understanding of this.

There is nothing to indicate that this came from or through Pixies. This was a bug that came up the Yahoo toilet. Only because so many of the people on many of our buddy lists happen to be Pixies and we talk to each other WITHOUT using Yahoo IM did we become aware if it as quickly as we did.

My Yahoo nick is not the same as here at Pixies and is not listed at Pixies. Therefore it seems they had only a list of Yahoo nicks and turned loose a virus that suckered us into entering the password that matches the name. Because the link came from people that we trust explicitly and appeared (at first glance ) to be structure of Yahoo (also with a level of confidence), we slide right down the drain. The fact that any ‘reply’ back to the (supposed) sender was derailed leads me to believe it wants to be very covert.

We don’t know yet, what is being done with this particular collection of nick’s WITH passwords, but I would think it only enables them to apply them to additional Yahoo services using that nick and password.

My understanding to date, is that it was sent ONLY as an offline IM. As soon as we opened our IM, it had access to our buddy list. I will post the person, date and time I received the first message when I get home tonight and we should be able to make a map of it’s travels through our group.

You had it all right til this part. When you entered your YAhoo ID and Password at that site you enabled the phishers to use your Yahoo ID and password to access your buddy list. Then they used a worm type program to send out IMs with the link to all your buddies.

It does not help anyone at all to post who sent what. It is irrelevant. It's a phishing scam and no one who became involved did so intentionally. Tracing who was victimized first doesn't solve any mystery it just makes people feel bad.

Please report any messages you receive on Yahoo IM containing the link to Yahoo security.

Okay... so not only does this piss me off because I HATE to change passwords... but mainly because I am now concerned with the other information on my pc... does this thing have the ability to obtain other info from your system? Anyone know?

Thanks..

and damn it if it weren't the "sxy_slapper" that did us all in.. LOL... had it said something boring like "something_boring" I may not have clicked on it BEFORE coming here :( :(

Great....now people are writing me asking me about links I'm sending them....and I haven't :(

IWM I understand how you feel. I am dealing with the same thing. Please encourage them to change their Yahoo password and to report the IM to Yahoo security.

After changing my password it seems to be all better now. Yesterday I could not even sign into messenger on my phone I was all corn-fused.

I changed my password, I got my confirmation, I pmed everyone that if they got a message from me that was just a link to ignore it or pm me about it before opening it.....now i have a new problem. I logged into my messenger and all of a sudden all of my friends on my lists are GONE. I had to reload everyone. If you're on my list and you haven't recieved an add from me today, then please pm me because I have forgotten your username or how you spell it or something.

Thank you. :) Whatever details we have of how this works is helpful for me. I don’t believe ANYBODY intentionally became involved and there’s no reason for any apologizes from anyone. Just a thank you for Pixies being here and allowing us to catch this as soon as we did.

At this point I would like to know if anyone received one of the bogus link messages AFTER midnight, 15 November. If you have, PLEASE let me know immediately.

Last i received was at 11/16/2005 8:57:57 AM Aussie time...you can convert it