Cyberthiefs stole $65000 from Party poker player.

[CORed]

[ QUOTE ]
[ QUOTE ]
How did hacking his hotmail account get the thieves into his Party account? Did he use the same password for both? Or did he have the password in an email stored on Hotmail? In either case, it was pretty careless.

[/ QUOTE ]

Start Partypoker. See the button called "forgot password"?

[/ QUOTE ]

Oh, I get it. They email you your password.

[stabn]

[ QUOTE ]

- Why doesn't any warning bells from the company ring? The thieves change password, logs in from the other side of the world and transfers the maximum $8 000 to other accounts and withdraws at once. Anyone could understand something is not right. Hotmail? I will never use it again


[/ QUOTE ]

Hotmail has nothing to do with the problem. He probably had a significant vulnerability that lead to his hotmail account password being stolen (like using that password at other websites or downloading malicious software).

[AngusThermopyle]

Well, I get sent to:

https://secure.partypoker.com/my_account/cpEnterDtl.htm

So, at least now, it seems you have to talk to somebody.

[Freudian]

They must have changed it today. Earlier you just had to type in the email and they sent it to you at once.

Perhaps something good came out of this and Party increased their security?

[ QUOTE ]
Start Partypoker. See the button called "forgot password"?

[/ QUOTE ]
And that's just plain stupid. No financial institution will simply send you a password or a link to reset your password in an e-mail. You always have to verify your identity. Neteller does this. Hell, even Hotmail makes you answer your "secret question."

If Party doesn't employ this vital security step, they deserve a publicity disaster.

[AngusThermopyle]

I do have one problem with the original story.

Hacked into his Hotmail account?

Or someone knew his Hotmail pw already ("friend", keylogger, etc)?

Is the assumption that Hotmail can be hacked into that easily?

Guess they might know what Party screen name goes with what Hotmail account, but that is another layer of security that online players should pay attention to themselves, to protect themselves and not depend on the sites (poker or banking) to do it all for them.

[Hornacek]

[ QUOTE ]
Guess they might know what Party screen name goes with what Hotmail account, but that is another layer of security that online players should pay attention to themselves, to protect themselves and not depend on the sites (poker or banking) to do it all for them.

[/ QUOTE ]
nh.

[Nick B.]

[ QUOTE ]

Hotmail has nothing to do with the problem. He probably had a significant vulnerability that lead to his hotmail account password being stolen (like using that password at other websites or downloading malicious software).

[/ QUOTE ]

Hotmail accounts are not very secure. All you need to do to reset somebody's password is know what city they are from and their secret question. Yahoo you need to know the person's DOB, city and secret question. Gmail you need to have access to their secondary email account to get the password.

[Freudian]

[ QUOTE ]
I do have one problem with the original story.

Hacked into his Hotmail account?

Or someone knew his Hotmail pw already ("friend", keylogger, etc)?

Is the assumption that Hotmail can be hacked into that easily?

Guess they might know what Party screen name goes with what Hotmail account, but that is another layer of security that online players should pay attention to themselves, to protect themselves and not depend on the sites (poker or banking) to do it all for them.

[/ QUOTE ]

Of course most likely his computer was compromized at some point. Many computers are. The pokerrooms security has to work under the assumption that emials or computers can be comprimized. If they assume everyones computer is safe they will work from non realistic conditions.

[vilemerchant]

Could very easily have been someone he knew, maybe even just someone he knew over the net. How hard would it be to know someone's city and their secret question of "Pet's name"...