Urgently need advice. I think I just gave hackers my hotmail password.

[snagglepuss]

My hotmail acct is what I use for all business correspondence and it's in my name. I went to open it and I got a window sayng that it appeared that someone was trying to access my acount so I had to request a code that would be sent to an alternative email acct. I never got that email so I went back and clicked on link that said "Can't access any of these options." Another window came up that asked for my name, BD, other email address, subject line of recent email, and current hotmail password. It also asked for CC info but I didn't enter that. Message than was it would take 24 hours to send security code.

As soon as I entered the info I regreted my decision as I realized that hotmail has no reason to ask for CC info.

I am not computer savvy. Does this sound like hacking? Have I just given away my hotmail acct to hackers?

[OriginalGeek]

1. I'd say chances are pretty good

go change your password right now.

If all you gave them was your password then all they can do is get in and see your emails so change it before they do.

[snagglepuss]

8. When I try to chnage passwrd, I get message that it takes up to 24 hours.

My concern is whether that message is from hackers or a legit message from MS.

[OriginalGeek]

11. I think they often say they take some period of time but I've never had it happen

where it wasn't immediate. Hotmail should have an 800 number you can call and they will walk you through the steps to make sure it gets changed - if you call them it should be legit.

here's a legit url: https://account.live.com/resetpassword.aspx

that's the link you get when you go to hotmail's "I think someone hacked my account" link.

[Systematic Chaos]

2. If you haven't already, go into Hotmail Support and under your account options, change your password

to something totally and completely new. Make sure you're navigating to that from within Microsoft/Hotmail menus.

It is doubtful anyone's done anything to your account to compromise it this quickly. But, if you're unable to enter your normal password and get into your account then you immediately need to go to the support section about believing your account to be compromised, because now it will have to be solved from Microsoft's side of things.

I'm tired as hell and sincerely hope that made sense. Just don't waste any more time!

[snagglepuss]

7. Thanks for your reply. I can't get into my acct and when I try to reset I get message

saying that a reset will take up to 24 hours. Does that sounds legitimate? And ss I can't get in I can't access the support section.

[cliffordu]

3. Someone is trying to hack YOU.

your name, BD and CC info password, etc, means you could be wiped out asap.

Did you send your BD and CC info??? Your SSN??

[snagglepuss]

4. Thanks for the reply. I BD info I orginally gave when I set it was phony so

hackers would only have my name but I did enter my hotmail password
so they would see my Mastercard bill. My hotmail has some very personal emails which I don't want anyone to see.

[cliffordu]

5. I'd be changing that password immediately

Maybe getting another email service. I use a small internet service provider - they know me by name and have amazing anti-spam filters.

[snagglepuss]

6. Even when I reset my password the message I'm getting is that it may take 24 hours.

The pages look legit but the Hotmail info page doesn't say anything about resets taking up to 24 hours.

[Moondog]

9. I'd be setting up another

account on Gmail, Yahoo, or whatever. Then send out a broadcast email to your various business contacts telling them that your previous address has been compromised, this is now your new address, and please use the new one from now on.

Then sort out the old address.

[cliffordu]

10. Yep.

[HopeHoops]

12. "hotmail" is the problem word here. It's security is minimal at best.

Get a domain name and use that for e-mail. Yes, it costs money - like $13/year - but the actual security is worth it. I've got 92 domains right now, all paid through a year from now or longer. Hotmail and gmail are notorious for being hacked.

[InsultComicDog]

13. they probably have already sent out something

to everyone in your e-mail list, using a subject line you gave them, and possibly containing viruses and/or spam and/or phishing.

[Saving Hawaii]

14. New password. Now. Immediately.

Just do it right away.

That's not hacking, it's phishing but not too different.

Change your password.

[UnrepentantLiberal]

15. Maybe this is a bad time to read this:

http://www.democraticunderground.com/10021864946

Kill the Password: Why a String of Characters Can’t Protect Us Anymore

By Mat Honan
Wired
Nov 15, 2012

-snip-

Since that awful day, I’ve devoted myself to researching the world of online security. And what I have found is utterly terrifying. Our digital lives are simply too easy to crack. Imagine that I want to get into your email. Let’s say you’re on AOL. All I need to do is go to the website and supply your name plus maybe the city you were born in, info that’s easy to find in the age of Google. With that, AOL gives me a password reset, and I can log in as you.

First thing I do? Search for the word “bank” to figure out where you do your online banking. I go there and click on the Forgot Password? link. I get the password reset and log in to your account, which I control. Now I own your checking account as well as your email.

This summer I learned how to get into, well, everything. With two minutes and $4 to spend at a sketchy foreign website, I could report back with your credit card, phone, and Social Security numbers and your home address. Allow me five minutes more and I could be inside your accounts for, say, Amazon, Best Buy, Hulu, Microsoft, and Netflix. With yet 10 more, I could take over your AT&T, Comcast, and Verizon. Give me 20—total—and I own your PayPal. Some of those security holes are plugged now. But not all, and new ones are discovered every day.

The common weakness in these hacks is the password. It’s an artifact from a time when our computers were not hyper-connected. Today, nothing you do, no precaution you take, no long or random string of characters can stop a truly dedicated and devious individual from cracking your account. The age of the password has come to an end; we just haven’t realized it yet.

More: http://www.wired.com/gadgetlab/2012/11/ff-mat-honan-password-hacker/all/

[snagglepuss]

17. Thanks for your reply. Actually I found out that MS sensed an intruder so denied me as well as

the person trying to get in access.

To get access back I had to provide acct info like the last subject lines of emails sent, file names and BD. Maybe AOL is different but hotmail had me through hoops because I couldn't remember subject lines of emails i had sent and providing file names wasn't enough so my first request was denied. Luckily i got back in when i was able to tell them what incoming emails I had recently recd. WHEWWWW. I am so relieved that I have never done anything financial online, not even online banking.

[UnrepentantLiberal]

19. Glad it turned out OK for you.

[Fla Dem]

18. OK, That's just mean

Snagglepuss is in a dilemma and is clearly stressed. While maybe in another situation, this may have been a funny response, imho here it was not.

[Orrex]

20. Yeah, point taken

mea culpa