Two step verification

It seems that BT (or at least the Yahoo part) has on-going issues with users' passwords being hacked. I had an email from a good friend recently who was stuck in Rome and needed funds to be sent urgently (Yeah, right!). I have a Microsoft account which texts me an access code when I log on. I have to enter this as a second step before I can get to my mail. Just wondering why BT can't offer this as an option.

Are you sure the BT email account was hacked?

It is quite possible the spammer just got a list of email addresses and spoofed them. This can be done very easily and requires no access to the account itself.

EDIT to add: Just thought that as you received the email from the friend it is likely their address book is compromised. However, it is just as likely that this is via a virus/malware on their own PC harvesting the address book rather than the BT account itself.

Edited by ian72 (Tue 27-May-14 13:22:42)

Also examining the email header can reveal a different source from the one shown in the normally viewed email.