07 October 2009

Google, Yahoo! and Hotmail Phishing Problem

Google, Yahoo! and Hotmail email accounts have all be the victims of phishing. Over the last few days there have been various reports about how lists of email accounts and passwords have been posted on Pastebin.

Change your passwords ASAP.

Best practice recommends that passwords must be changed every 120 days and they should not be reused.

We recommend using a pass phrase which is a combination of a memorable word mixed with some numbers, for example, 1dIwtl&e - one day i'll win the lottery and escape.

Best practice is to create a password that has:

  • at least 8 characters
  • at least 1 lower case letter
  • at least 1 upper case letter
  • at least 1 number
  • at least 1 special character (?, *, %, etc)

Passwords must not:

  • be all or part of your account ID
  • be all or part of your account name
  • be blank
  • contain dictionary words
  • contain more than 2 repetitive characters (Mmmmmm1, Ab77777, etc)
  • contain substituted numbers and symbols for letters (3 for E, $ for S, etc)

No comments: