What is shyou.org?? Fake site by Chinese Hackers?

Discussion in 'Google' started by S.Phoenix, Dec 2, 2006.

  1. #1
    When i typed (as usually i do) Yahoo Mail in google, in order to get into the E-Mail page of the Yahoo website, from Google site, got in the first result the page:

    Does anybody knows what the hell is this?

    I clicked on it (because i didn't even saw in the first time that was this strange URL) and put my password and login...and it was taking ... too long to login...and nothing..happens...when i realised this page was too strange.

    Anybody knows anything about this?

    Best Regards

     
    S.Phoenix, Dec 2, 2006 IP
  2. Dave Hybrid

    Dave Hybrid Active Member

    Messages:
    997
    Likes Received:
    21
    Best Answers:
    0
    Trophy Points:
    83
    #2
    If I were you I'd login through the proper yahoo page NOW and change you password as you have just given it to hackers.
     
    Dave Hybrid, Dec 2, 2006 IP
  3. Gnet

    Gnet Peon

    Messages:
    5,340
    Likes Received:
    529
    Best Answers:
    0
    Trophy Points:
    0
    #3
    yay yahoo got hacked!
     
    Gnet, Dec 2, 2006 IP
  4. h4nh4n

    h4nh4n Peon

    Messages:
    931
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    0
    #4
    report them to Yahoo! I suggest you to change your pass right now!
     
    h4nh4n, Dec 2, 2006 IP
  5. vid

    vid Peon

    Messages:
    209
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    yea :( I've lost my account :(
     
    vid, Dec 2, 2006 IP
  6. ThraXed

    ThraXed Peon

    Messages:
    1,794
    Likes Received:
    56
    Best Answers:
    0
    Trophy Points:
    0
    #6
    change your password RIGHT now thats a fake login page
     
    ThraXed, Dec 2, 2006 IP
  7. tarr

    tarr Peon

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Awful! What will those bastards gain?
     
    tarr, Dec 2, 2006 IP
  8. Diddy1

    Diddy1 Peon

    Messages:
    295
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    0
    #8
    The ability to send spam to all his contacts and they'll think it's from him therefore trusting them.

    Thank You
     
    Diddy1, Dec 2, 2006 IP
  9. JKE

    JKE Peon

    Messages:
    222
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    0
    #9
    http://www.google.com/search?num=100&hl=en&lr=&safe=off&q=yahoo+mail+shyou.org&btnG=Search

    Interesting

    http://search.yahoo.com/search?p=yahoo+mail+shyou.org+&fr=yfp-t-501&toggle=1&cop=mss&ei=UTF-8

    Look @ result #5.. ???.com ... wtf?

    http://www.google.com/search?num=100&hl=en&lr=&safe=off&q=shyou&btnG=Search
    http://search.yahoo.com/search?p=shyou&fr=yfp-t-501&toggle=1&cop=mss&ei=UTF-8

    https://siteexplorer.search.yahoo.c...u.org&bwm=p&bwms=p&fr=yfp-t-501&fr2=seo-rd-se
    http://www.google.com/search?hl=en&q=site:shyou.org&btnG=Google+Search

    30k+ on google? what the hell is this crap?

    How are the full domain names in the URLs not a total red flag for google? Notice how most appear to be https (secure) sites... (even better!)

    Looks like google got totally suckered into this one. And you know, it isn't like the domains in URLs is at all a new thing.

    From what i can tell, yahoo at least didn't at all fall for the domains in URLs thing. Which is like something you'd see a decade ago.
     
    JKE, Dec 2, 2006 IP
  10. Dave Hybrid

    Dave Hybrid Active Member

    Messages:
    997
    Likes Received:
    21
    Best Answers:
    0
    Trophy Points:
    83
    #10
    Not only that, more importantly they can read any emails left in the inbox, like confirmation emails from online banking and other sites containing passwords.

    They can then log-in to other sites you use and transfer money etc etc.
     
    Dave Hybrid, Dec 2, 2006 IP
  11. S.Phoenix

    S.Phoenix Peon

    Messages:
    78
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #11
    Fortunately i didn't lost my account, because before posting here this thread i just have changed my account. When i realised it i in the moment imediately changed my pass in real yahoo site.

    But how can Google got missunderstood it's search list??

    This is the most incredible technique i ever saw...this seems to be like Google Bombing.

    :confused:
     
    S.Phoenix, Dec 2, 2006 IP
  12. oseymour

    oseymour Well-Known Member

    Messages:
    3,960
    Likes Received:
    92
    Best Answers:
    0
    Trophy Points:
    135
    #12
    this is incredible..
     
    oseymour, Dec 2, 2006 IP
  13. S.Phoenix

    S.Phoenix Peon

    Messages:
    78
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #13
    Is really curious that the result is still there...:eek:
     
    S.Phoenix, Dec 3, 2006 IP
  14. dilute

    dilute Peon

    Messages:
    232
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #14
    I think it's more likely to be some kind of cache/mirror/proxy service based on how long the domain has been registered and the number of google results. Registered to someone in the US, why doesn't someone call and get some more details?
     
    dilute, Dec 3, 2006 IP
  15. hhheng

    hhheng Banned

    Messages:
    2,633
    Likes Received:
    37
    Best Answers:
    0
    Trophy Points:
    0
    #15
    Why you said it is Chinese Hacker?
     
    hhheng, Dec 3, 2006 IP
  16. redhits

    redhits Notable Member

    Messages:
    3,023
    Likes Received:
    277
    Best Answers:
    0
    Trophy Points:
    255
  17. riverlee

    riverlee Peon

    Messages:
    75
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #17
    riverlee, Dec 4, 2006 IP
  18. redhits

    redhits Notable Member

    Messages:
    3,023
    Likes Received:
    277
    Best Answers:
    0
    Trophy Points:
    255
    #18
    for Yahoo ? no way ! and do you known why!? Because is very hard...
    If I remember well Yahoo got JavaScript code on http://mail.yahoo.com , and each time you request that time, the server will generate an encryption algoritm (you may see it by vew the code source), and after your write your username/password, it will first encrypt your username/password using your uniq javascript code, and only after that send the data via POST method...
     
    redhits, Dec 4, 2006 IP