Help please with identity hijacking

[BearCat]

Quote:

Originally Posted by XPatriot

I was wondering if anyone could possibly tell me how someone could have discovered
not only the passwords to numerous hotmail accounts when some of them are not only
unknown to anyone other than me and when all are unrelated to one another... used in separate identities in Outlook express?

Actually, this is relatively easy with packet sniffing.
You don't need to "lsten" directely to the computer, as long as you have access to parts of the network involved.
A wiretap, or wireless listening (with unencrypted or weakly encrypted wireless)
will reveal the passwords used when checking the e-mail.
And as a "side effect" also your username... so it's all available to be stolen.


More on the subject.

[XPatriot]

Hello again and thanks,

I've did the research via Google on keylogging and only found programs that you would have to open (via email attachments) for them to work and send info to their users. I've read the info on packet sniffers (thanks btw) and it seems to be a local network spy concept. I can assure you that this person found out this information about me before I started using a wireless router, and even so he/she was never connected to my network...since a promiscuous sniffer as you know can only sniff the data traffic being shared on its local network segment...the offending person does not live in my house..

About keyloggers via email attachements; I mentioned earlier that I only sent one email to this person, they only sent one back. It was to my Yahoo account and the only thing that they would have recieved from that is an IP address...I only used that email address a few times and the communication with this person was to an unknown person and the original conversation was solicited by me...

Ok then, If keyloggers need the host computer to have the Keylogger running on it, and would have had to been executed by me (which I know it wasn't)then a Keylogger is out of the question, and if packet sniffers only work on local networks then that too is out of the question???

Am I wrong??