New Issue: Orbital Catastrophe Ahead? Read Now

AOL E-Mail Accounts Churn Out New Spam

Spammers have broken into AOL's mail server to hijack accounts' address books and send tons of spam to those contacts

 

Join Our Community of Science Lovers!

You thought you'd seen the last of it. But your old AOL email address (remember, from the nineties?) could still return to haunt you. Spammers may have broken into AOL's mail server to hijack old accounts and send tons of spam to people in the compromised accounts' address books.

Even if you don't have an AOL email address, you might still find some emails in your inbox, ostensibly from a friend, containing links to spam websites advertising miracle diets.

MORE: 7 Ways to Lock Down Your Online Privacy


On supporting science journalism

If you're enjoying this article, consider supporting our award-winning journalism by subscribing. By purchasing a subscription you are helping to ensure the future of impactful stories about the discoveries and ideas shaping our world today.


The spam first started appearing in the past few days, but AOL hasn't been able to fix the issue.

"Once your account i[s] spoofed, there is nothing else that can be done. I wish there was something we can do," AOL tweeted from its @aolmailhelp account.

AOL says that its servers weren't hacked, but rather that the affected email accounts were "spoofed." This means that while the messages appear to come from AOL accounts, they're actually originating from a server controlled by the spammers. AOL addresses, the company says, are merely being faked.

But as security expert Graham Cluley pointed out on his blog, "this doesn't explain how the emails are being sent to genuine contacts of those particular AOL users – have the address books of AOL users or AOL's mail logs somehow fallen into the hands of malicious third parties?"

Many angry AOL users have taken to Twitter to voice their outrage. The #AOLHacked hashtag is full of users reporting that their AOL accounts are now being used to send spam to their contacts.

AOL says that it might help affected users to switch their email settings to send emails from their own domains. But as most users probably don't own an online domain, that isn't the most helpful of advice.

Copyright 2014 Toms Guides , a TechMediaNetwork company. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Subscribe to Support Independent Journalism

Great science journalism requires human expertise, time, effort and creativity. And it costs money. That’s why I and the journalists here at Scientific American hope you’ll join our community.

When you subscribe, you are supporting staff and freelance journalists who are passionate about telling science stories that are true, important and compelling. Our editors and reporters are often experts in their fields, which means they understand the nuances of big discoveries and can untangle the breakthroughs from the hype. With a subscription, you are also supporting rigorous fact-checking to ensure the words we publish are precise and accurate. And you’re supporting original illustrations, graphics and photos that bring you closer to an advanced laboratory, an ice sheet in Antarctica or a space mission in orbit. You’re helping us craft other types of high-quality journalism as well: Our newsletters are carefully written, edited and curated by staffers you have or will come to know and love. Our Science Quickly podcast is based on original reporting, collaboration with editors and scientists and exacting production.

Subscriptions keep this engine running so we can continue to deliver thoughtful, rigorous and independent science journalism to you. In an era of viral misinformation, this work is crucial. If you value what we do, I hope you’ll consider joining us as a subscriber

Thank you,

Jeanna Bryner, Editor in Chief, Scientific American

Subscribe