06 October 2009 | Author: Katie ToddPhishing attack nabs 10,000 Hotmail passwords

Hotmail users have been advised to change their passwords as quickly as possible following a phishing attack that saw thousands of genuine email address and their log in details being published across the web.
The attack was discovered on Monday, but the passwords had already been posted over the weekend - meaning that, although the original posts have been taken down, duplicate copies could already be stored on individuals' computers or winding their way across other forums and websites.
Originally, it was uncertain as to how the attacker gained access to the private information, but Microsoft has since stated that the cyber criminal did not crack its security but tricked Hotmail users into giving their details through phishing schemes instead.
In a statement, Microsoft said: "Over the weekend, Microsoft learned that several thousand Windows Live Hotmail customers' credentials were exposed on a third-party site due to a likely phishing scheme.
"Upon learning of the issue, we immediately requested that the credentials be removed and launched an investigation to determine the impact to customers. As part of that investigation, we determined that this was not a breach of internal Microsoft data and initiated our standard process of working to help customers regain control of their accounts."
A phishing attack is when an attacker attempts to masquerade as a trustworthy source in order to obtain a web user's personal details, such as account numbers, passwords and credit card details. Usually, such emails or fraudulent websites tend to be easy to identify, but as phishing scams become more sophisticated, it's easier for even savvy users to find themselves hoodwinked.
If you receive a call to action in your email inbox demanding you submit personal details, it is best to go to the website itself to check its veracity rather than click on any links. You can then contact the company to ensure they sent you the email.