UPDATE: As of around 10:30 on 11 October,
Critical Path
are now exclusively dealing with BTi incoming mail. Yahoo! are no longer in the loop at all.
According to an interview given to
The Telegraph,
BTinternet's email services are being moved to BT-Mail following hacking claims.
We have accounts with all the webmail providers for deliverability testing.
Today I tried to set up the main contact address for my Yahoo!
account to be:
yahoo-throw@example.com
, the attempt was blocked by Yahoo! with an error.
This is not true as Yahoo! had not tested this address, no connection came from their servers.
As most Sky mail customers will be only too aware of by now; Sky are trransferring their service from Gmail to Yahoo!
So far the change, which started on the 4th April, has not exactly gone smoothly.
One legacy from the Gmail service is the
SPF record for sky.com:
"v=spf1 ip4:87.86.189.0/25 include:aspmx.googlemail.com a:im3.sky.com mx:sky.com include:sendgrid.net ~all"
which has not been updated to reflect the new status.
Our customers may experience delays on mail from non-whitelisted @sky.com addresses as a result.
Sky.com mail users must now take
additional precautions
to secure their account.
UPDATE 10th July: Yet more accounts have been hacked in the last 24-hours, so the problem continues.
We've seen a huge increase in spam coming from yahoo.com e-mail servers.
Many accounts have been compromised, more come in every day. There is much talk on the web about this and as of this morning the problem ain't fixed!
Currently the spams are punting links to fake
pages promoting work at home or diet scams.
Both
BTinternet
(but
only for the time being)
& now
Sky
e-mail services in the UK are outsourced to Yahoo! so those accounts are also vulnerable to hijacking.
Our advice once hacked:
You MUST change your password immediately! If the same password has been used elsewhere then you change it there too as those are also now at risk. If you need a password suggestion: Think of a line from your favorite song (or poem if you like) and use the initial letters from each word, including capital letters and punctuation. Your new password must be at least ten apparently random letters for it to be secure.
UPDATE 17th June: Our server just rejected a spam sent via a Yahoo! server from
<bigbiglottocompany@gmail.com>.
You do wonder sometimes. Why on earth are
Yahoo!
sending SPAM on behalf of these users of other webmail services: hotmail.fr, hotmail.com, gmail.com, rediffmail.com, live.com.
These are sender domains strained from our recent logs and are associated with connections from yahoo.com servers.